On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law Internets

Computer Communication Review

Volumn 31, Issue 4, 2001, Pages 15-26

  Park, Kihong ^a   Lee, Heejo ^a,b  

^a Purdue University   (United States)

^b Ahnlab Inc   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; DATA COMMUNICATION SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; NETWORK PROTOCOLS; PACKET NETWORKS; QUALITY OF SERVICE; SECURITY OF DATA;

DENIAL OF SERVICE; DISTRIBUTED PACKET FILTERING; INTERNET AUTONOMOUS SYSTEM; PACKET FLOWS; ROUTE BASED PACKET FILTERING;

INTERNET;

EID: 0034776786     PISSN: 01464833     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/964723.383061     Document Type: Conference Paper

References (31)

1. Resource containers: A new facility for resource management in server systems
2. ICMP traceback messages
3. Tracing anonymous packets to their approximate source
4. Consensus roadmap for defeating distributed denial of service attacks
5. On power-law relationships of the internet topology
6. Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing
7. Denial-of-service attacks rip the internet
8. An analysis of internet inter-domain topology and route stability
9. An analysis of security incidents on the internet
10. Inet: Internet topology generator
11. A formal framework and evaluation method for network denial of service
12. Brite: A flexible generator of internet topologies
13. A weakness in the 4.2BSD unix TCP/IP software
14. Purgatory 101: Learning to cope with the SYNs of the internet
15. On routes and multicast trees in the internet
16. On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack
17. Internet protocol
18. Security fun with OCxmon and cflowd
19. Practical network support for IP traceback
20. Analysis of a denial of service attack on TCP
21. Advanced and authenticated marking schemes for IP traceback
22. Defending against denial of service attacks in Scout
23. Characterizing and tracing packet floods using Cisco routers
24. Denial of service
25. Results of the distributed-systems intruder tools workshop
26. Routing of multipoint connections