Efficient packet marking for large-scale IP traceback

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2002, Pages 117-126

  Goodrich, Michael T ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Denial of service; Packet marking; Traceback

Indexed keywords

ALGORITHMS; INTERNET; PACKET NETWORKS; PROBABILITY; ROUTERS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC; THEOREM PROVING; TREES (MATHEMATICS);

DENIAL OF SERVICE; INTERNET PROTOCOL; PACKET MARKING; RANDOMIZE-AND-LINK; TRACEBACK;

NETWORK PROTOCOLS;

EID: 0038011192     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/586110.586128     Document Type: Conference Paper

References (22)

1. M. Adler. Tradeoffs in probabilistic packet marking for IP traceback. In 34th ACM Symposium Theory of Computing (STOC), 2002.
2. A. Anagnostopoulos, M. T. Goodrich, and R. Tamassia. Persistent authenticated dictionaries and their applications. In Information Security Conference (ISC 2001), LNCS 2200, 379-393, 2001.
3. T. Baba and S. Matsuda. Tracing network attacks to their sources. IEEE Internet Computing, 6(2):20-26, 2002.
4. S. M. Bellovin. ICMP traceback messages. In Work in Progress, Internet Draft draft-bellovin-itrace-00.txt, March 2000.
5. H. Burch and B. Cheswick. Tracing anonymous packets to their approximate source. In Usenix LISA (New Orleans) Conference, 313-322, 2000.
6. R. Cohen, M. T. Goodrich, R. Tamassia, and N. Triandopoulos. Authenticated data structures for graph and geometric searching. Technical report, Brown University, 2001.
7. D. Dean, M. Franklin, and A. Stubblefield. An algebraic approach to IP traceback. In Network and Distributed System Security Symposium (NDSS), 3-12, 2001.
8. P. Devanbu, M. Gertz, C. Martel, and S. Stubblebine. Authentic third-party data publication. In Fourteenth IFIP 11.3 Conference on Database Security, 2000.
9. M. T. Goodrich, R. Tamassia, and A. Schwerin. Implementation of an authenticated dictionary with skip lists and commutative hashing. In 2001 DARPA Information Survivability Conference and Exposition, vol. 2, 68-82, 2001.
10. J. Ioannidis and S. M. Bellovin. Implementing pushback: Router-based defense against DDoS attacks. In Network and Distributed System Security Symposium. The Internet Society, 2002.
11. D. E. Knuth. Fundamental Algorithms, vol. 1 of The Art of Computer Programming. Addison-Wesley, Reading, MA, 2nd edition, 1973.
12. L. Lamport. Password authentication with insecure communication. Communications of the ACM, 24(11):770-772, 1981.
13. D. Moore, G. Voelker, and S. Savage. Inferring internet denial-of-service activity. In Usenix Security Symposium, 2001.
14. R. Motwani and P. Raghavan. Randomized Algorithms. Cambridge University Press, New York, NY, 1995.
15. M. Naor and K. Nissim. Certificate revocation and certificate update. In 7th USENIX Security Symposium (SECURITY-98), 217-228, Berkeley, 1998.
16. K. Park and H. Lee. The effectiveness of probabilistic packet marking for IP traceback under denial of service attack, 2000.
17. V. Paxson. An analysis of using reflectors for distributed denial-of-service attacks. ACM Computer Communications Review (CCR), 31(3), July 2001.
18. J. Postel. Internet protocol, 1981.
19. S. Savage, D. Wetherall, A. R. Karlin, and T. Anderson. Practical network support for IP traceback. In SIGCOMM, 295-306, 2000.
20. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, and W. T. Strayer. Hash-based IP traceback. In ACM SIGCOMM 2001 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, 2001.
21. D. Song and A. Perrig. Advanced and authenticated marking schemes for IP traceback. In IEEE Infocomm, 2001.
22. R. Stone. Centertrack: An IP overlay network for tracking DoS floods. In 9th USENIX Security Symposium, August 2000.