Using overlays to improve network security

Proceedings of SPIE - The International Society for Optical Engineering

Volumn 4868, Issue , 2002, Pages 245-254

  Keromytis, Angelos D ^a   Misra, Vishal ^a   Rubenstein, Daniel ^a  

^a Government of New york   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; NETWORK PROTOCOLS; TELECOMMUNICATION LINKS; WORLD WIDE WEB;

DISTRIBUTED DENIAL OF SERVICE (DDOS);

TELECOMMUNICATION NETWORKS;

EID: 0036417644     PISSN: 0277786X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1117/12.475275     Document Type: Conference Paper

References (32)

1. J.H. Saltzer, D.P. Reed, and D.D. Clark, "End-to-end arguments in System Design," ACM Transactions on Computer Systems 2, pp. 277-288, November 1984.
2. J. Saltzer, D. Reed, and D. Clark, "End-to-end arguments in system design," ACM Trans. on Computer Systems 2, pp. 277-288, November 1984.
3. S.E.I.C.E.R. Team, "CERT Advisory CA-96.21: TCP SYN Flooding and IP Spoofing Attacks," tech. rep., SEI, Sept 1996. ftp://info.cert.org/pub/cert_advisories/CA-96.21.tcp_syn_flooding.
4. C. Schuba, I. Krsul, M. Kuhn, E. Spafford, A. Sundaram, and D. Zamboni, "Analysis of a denial of service attack on tcp," in IEEE Security and Privacy Conference, pp. 208-223, May 1997.
5. L. Heberlein and M. Bishop, "Attack Class: Address Spoofing," in Proceedings of the 19th National Information Systems Security Conference, pp. 371-377, October 1996.
6. J. Ioannidis and S.M. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks," in Proc. of the Network and Distributed System Security Symposium (NDSS), February 2002.
7. D. Dean, M. Franklin, and A. Stubblefield, "An Algebraic Approach to IP Traceback," in Proc. of the Network and Dsitributed System Security Symposium (NDSS), pp. 3-12, February 2001.
8. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Network Support for IP Traceback," ACM/IEEE Transactions on Networking 9, pp. 226-237, June 2001.
9. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Practical Network Support for IP Traceback," in Proc. of the 2000 ACM SIGCOMM Conference, pp. 295-306, August 2000.
10. A. Keromytis, V. Misra, and D. Rubenstein, "SOS: Secure Overlay Services" in Proceedings of ACM SIGCOMM'02, (Pittsburgh, PA), August 2002.
11. S. Deering and D. Cheriton, "Multicasting routing in datagram internetworks and extended LANs," ACM Transactions on Computer Systems 8, pp. 85-110, May 1990.
12. T. Ballardie, P. Francis, and J. Crowcroft, "Core based trees (CBT)," in Proceedings of ACM SIGCOMM'93, pp. 85-95, (San Francisco, CA), September 1993.
13. S. Deering, D. Estrin, D. Farinacci, V. Jacobson, C. Liu, and L. Wei, "An Architecture for Wide-Area Multicasting," in Proceedings of ACM SIGCOMM'94, (London, UK), August 1994.
14. H. Holbrook and D. Cheriton, "IP Multicast Channels: EXPRESS Support for Large-Scale Single-Source Applications," in Proceedings of SIGCOMM'99, (Cambridge, MA), September 1999.
15. C. Diot, B. Levine, B. Lyles, H. Kassem, and D. Balensiefen, "Deployment Issues for the IP Multicast Service and Architecture," IEEE Network Magazine, Jan/Feb 2000.
16. Y. Chu, S. Rao, and H. Zhang, "A Case for End System Multicast" in Proceedings of ACM SIGMETRICS'00, (Santa Clara, CA), May 2000.
17. J. Jannotti, D. Gifford, K. Johnson, M. Kaashoek, and J. O'Toole, "Overcast: Reliable Multicasting with an Overlay Network," in Proceedings of USENIX, (San Diego, CA), October 2000.
18. Y. Chawathe, S. McCanne, and E. Brewer, "RMX: Reliable Multicast for Heterogeneous Networks," in Proceedings of IEEE INFOCOM'00, (Tel-Aviv, Israel), March 2000.
19. Y. Chu, S. Rao, S. Seshan, and H. Zhang, "Enabling Conferencing Applications on the Internet Using an Overlay Multicast Architecture," in Proceedings of ACM SIGCOMM'01, (San Diego, CA), August 2001.
20. Z. Liu, N. Malouch, D. Rubenstein, and S. Sahu, "Delay-bounded End-system Multicast with Proxy Support," in Proceedings of the Tenth International Workshop on Quality of Service (IWQoS), May 2002.
21. S. Savage, A. Collins, E. Hoffman, J. Snell, and T. Anderson, "The End-to-End Effects of Internet Path Selection," in Proceedings of SIGCOMM'99, (Cambridge, MA), September 1999.
22. D. Andersen, H. Balakrishnan, F. Kaashoek, and R. Morris, "Resilient Overlay Networks," in Proceedings of ACM SOSP'01, (Banff, Canada), October 2001.
23. "The Gnutella Protocol Specification v0.4, revision 1.2." Available from http://gnutella.wego.com.
24. I. Stoica, R. Morris, D. Karger, F. Kaashoek, and H. Balakrishnan, "Chord: A Scalable Peer-To-Peer Lookup Service for Internet Applications," in Proceedings of ACM SIGCOMM'01, (San Diego, CA), August 2001.
25. F. Dabek, F. Kaashoek, R. Morris, D. Karger, and I. Stoica, "Wide-Area Cooperative Storage with CFS," in Proceedings of ACM SOSP'01, (Banff, Canada), October 2001.
26. S. Ratnasamy, P. Francis, M. Handley, R. Karp, and S. Shenker, "A Scalable Content-Addressable Network," in Proceedings of ACM SIGCOMM'01, (San Diego, CA), August 2001.
27. A. Rowstron and P. Druschel, "Storage Management and Caching in PAST, A Large-scale, Persistent Peer-to-peer Storage Utility," in Proceedings of ACM SOSP'01, (Banff, Canada), October 2001.
28. D. Chaum, "Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms," Communications of the ACM 24(2), pp. 84-90, 1981.
29. A. Pfitzmann, B. Pfitzmann, and M. Waidner, "Isdnmixes: Untraceable communication with very small bandwidth overhead," 1991.
30. M.K. Reiter and A.D. Rubin, "Crowds: anonymity for Web transactions," ACM Transactions on Information and System Security 1(1), pp. 66-92, 1998.
31. M.G. Reed, P.F. Syverson, and D.M. Goldschlag, "Anonymous connections and onion routing," IEEE Journal on Special Areas in Communications 16(4), pp. 482-494, 1998.
32. S. Kent and R. Atkinson, "Security Architecture for the Internet Protocol," Request for Comments (Proposed Standard) 2401, Internet Engineering Task Force, Nov. 1998.