High-speed router filter for blocking TCP flooding under DDoS attack

IEEE International Performance, Computing and Communications Conference, Proceedings

Volumn , Issue , 2003, Pages 183-190

  Kim, Yoohwan ^a   Jo, Ju Yeon ^a   Chao, H Jonathan ^b   Merat, Frank ^a  

^a Case Western Reserve University   (United States)

^b POLYTECHNIC UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; COMPUTER HARDWARE; COMPUTER SIMULATION; QUALITY OF SERVICE; ROUTERS; TELECOMMUNICATION TRAFFIC; WEBSITES;

DISTRIBUTED DENIAL-OF-SERVICE; HIGH-SPEED ROUTER FILTER; POINT-OF-PRESENCE;

NETWORK PROTOCOLS;

EID: 0038445134     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Tuomas Aura, Pekka Nikander, and Jussipekka Leiwo, "DOS-resistant Authentication with Client Puzzles," Lecture notes in Computer Science Series, April 20000, Springer.
2. Y. W. Chen, "Study on the Prevention of SYN Flooding by Using Traffic Policing," In Proceedings of Network Operations and Management Symposium, 2000.
3. Cisco IOS Security Configuration Guide, "Configuring TCP Intercept (Preventing Denial-of-Service Attacks)," pp. SC-231-SC-218, http://www.cisco.com.
4. Cisco IOS Security Guide, "Configuring Unicast Reverse Path Forwarding," pp. SC-429-SC-446, http://www.cisco.com.
5. Li Fan, Pei Cao, Jussara Almeida, and Andrei Z. Broder, "Summary Cache: A Scalable Wide-Area Web Cache Sharing Protocol," IEEE Transactions on Networking, Vol. 8, No. 3, pp. 281-293, June 2000.
6. Chun-Kan Fung and M.C. Lee, "A Denial-of-Service Resistant Public-key Authentication and Key Establishment Protocol," In Proceedings of IEEE International Performance, Computing, and Communications, 2002.
7. Lee Garber, "Denial-of-Service Attacks Rip the Internet", IEEE Computer, April, 2000, pp. 12-17
8. Yih Huang and J. Mark Pullen, "Countering Denial-of-Service Attacks Using Congestion Triggered Packet Sampling and Filtering," In Proceedings of Computer Communications and Networks, 2001.
9. Geoff Huston, ISP Survival Guide, Strategies for Running a Competitive ISP, Wiley Computer Publishing, New York, NY 1999.
10. John Ioannidis and Steven M. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks," In Proceedings of Network and Distributed System Security Symposium, Feb. 2002.
11. Dai Kashiwa, Eric Y. Chen and Hitoshi Fuji, "Active Shaping: A Countermeasure against DDoS Attacks," In Proceedings of European Conference on Universal Multiservice Networks, 2002.
12. David Mankins, Rajesh Krishnan, Ceilyn Boyd, John Zao, Michael Frentz, "Mitigating Distributed Denial of Service Attacks with Dynamic Resource Pricing", In proceedings of 17th Annual conference on Computer Security Applications, 2001.
13. Jack May, Jim Peterson, John Bauman, "Attack Detection in Large Networks", In Proceedings of DARPA Information Survivability Conference and Expo II, 2001.
14. David Moore, Geoffrey M. Voelker and Stefan Savage, "Inferring Internet Denial-of-Service Activity," In Proceedings of 10th USENIX Security Symposium, Aug. 2001.
15. Kihong Park and Heejo Lee, "On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets," In Proceedings of ACM SIGCOMM, Aug. 2001.
16. Shoreline Firewall, "Shorewall 1.3", http://www.shorewall.net
17. Elizabeth Strother, "Denial of Service Protection, The Nozzle," In Proceedings of Computer Security Applications, pp. 32-41, 2000.
18. Yong Xiong, Steve Liu, and Peter Sun, "On the Defense of the Distributed Denial of Service Attacks: An On-Off Feedback Control Approach," IEEE Transactions on Systems, Man, and Cybernetics-Part A: Systems and Humans, Vol. 31, No. 4, pp. 282-293, July 2001.
19. David K. Y. Yau, John C. S. Lui, and Feng Liang, "Defending Against Distributed Denial-of-Service Attacks with Max-min Fair Server-centric Router Throttles," In Proceedings of IEEE International Workshop on Quality of Service, pp. 35-42, 2000.