Defending against distributed denial of service attacks using selective pushback

Proceeding of the International Conference on Telecommunications

Volumn 1, Issue , 2002, Pages 411-427

  Peng, Tao ^a   Leckie, Christopher ^a   Ramamohanarao, Kotagiri ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER SIMULATION; INTERNET; NETWORK PROTOCOLS; PACKET SWITCHING; PROBABILITY; ROUTERS; SECURITY OF DATA; SIGNAL FILTERING AND PREDICTION; TELECOMMUNICATION TRAFFIC;

DISTRIBUTED DENIAL OF SERVICE ATTACK; PROBABILISTIC PACKET MARKING; SELECTIVE PUSHBACK;

CONGESTION CONTROL (COMMUNICATION);

EID: 0141760371     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. S. Bellovin. The icmp traceback message. Internet Draft, IETF, March 2000. draft-bellovin-itrace-05.txt (work in progress). http://www.research.att.com/~smb.
2. George Box and Alberto Lucenõ. Statistical Control by Monitoring and Feedback Adjustment. John Wiley & Sons, Inc., 1997.
3. Hal Burch and Bill Cheswick. Tracing anonymous packets to their approximate source. in Proceedings of the 14th Systems Administration Conference, New Orleans, Louisiana, U.S.A., December 2000.
4. João B. D. Cabrera, Lundy Lewis, Xinzhou Qin, Wenke Lee, Ravi K. Prasanth, B. Ravichandran, and Raman K. Mehra. Proactive detection of distributed denial of service attacks using mib traffic variables- a feasibility study. In Proceedings of the 7th IFIP/IEEE International Symposium on Integrated Network Management, Seattle, WA, May 14-18 2001.
5. Drew Dean, Matt Franklin, and Adam Stubblefield. An algebraic approach to ip traceback. In Network and Distributed System Security Symposium, NDSS '01, February 2001.
6. Waikato Applied Network Dynamics Research Group. Auckland university data traces. http://wand.cs.waikato.ac.nz/wand/wits/.
7. Yih Huang and J. Mark Pullen. Countering denial-of-service attacks using congestion triggered packet sampling and filtering. In Proceedings of 10th International Conference on Computer Communications and Networks, 2001.
8. John Ionnidis and Steven M. Bellovin. Pushback: Router-based defense against ddos attacks. AT&T Labs Research, February 2001.
9. C. Leckie and R. Kotagiri. A probabilistic approach to detecting network scans. In Proceedings of Eight IEEE Network Operations and Management Symposium (NOMS 2002), Florence, Italy, 15-19 April 2002.
10. Wenke Lee and Salvatore Stolfo. Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, 1998.
11. Wenke Lee, Salvatore J. Stolfo, and Kui W. Mok. A data mining framework for building intrusion detection models. In IEEE Symposium on Security and Privacy, pages 120-132, 1999.
12. Ratul Mahajan, Steven M. Bellovin, Sally Floyd, John Ionnidis, Vern Paxson, and Scott Shenker. Controlling high bandwidth aggregates in the network. Technical report, AT&T Center for Internet Research at ICSI (ACIRI) and AT&T Labs Research, February 2001.
13. Ross Oliver. Countering syn flood denial-of-service attacks, August 29 2001. http://www.usenix.org/events/sec01/invitedtalks/oliver.pdf.
14. K. Park and H. Lee. On the effectiveness of probabilistic packet marking for ip traceback under denial of service attack. In Proceedings of IEEE IFOCOM 2001, 2001.
15. Kihong Park and Heejo Lee. On the effectiveness of router-based packet filtering for distributed dos attack prevention in power-law internets. In Proceedings of the 2001 ACM SIGCOMM Conference, San Diego, California, U.S.A., August 2001.
16. Vern Paxson. An analysis of using reflectors for distributed denial-of-service attacks. ACM Computer Communications Review (CCR), 31(3), July 2001.
17. Tao Peng, Christopher Leckie, and Kotagiri Ramamohanarao. Adjusted probabilistic packet marking for ip traceback. In Proceedings of Networking 2002, Pisa, Italy, May 2002.
18. Stefan Savage, David Wetherall, Anna Karlin, and Tom Anderson. Practical network support for ip traceback. In Proceedings of the 2000 ACM SIGCOMM Conference, August 2000. http://www.cs.washington.edu/homes/savage/traceback.html.
19. Alex C. Snoeren, Craig Partridge, Luis A. Sanchez, Christine E. Jones, Fabrice Tchakountio, Stephen T. Kent, and W. Timothy Strayer. Hash-based ip traceback. In Proceedings of the 2001 ACM SIGCOMM Conference, San Diego, California, U.S.A., August 2001.
20. Dawn X. Song and Adrian Perrig. Advanced and authenticated marking schemes for ip traceback. In Proceedings of IEEE INFOCOM 2001, 2001. http://paris.cs.berkeley.edu/perrig/projects/iptraceback/tr-iptrace.ps.gz.
21. Rajesh R. Talpade, Gitae Kim and Sumit Khurana. Nomad: Traffic-based network monitoring framework for anomaly detection. In Proceedings of the Fourth IEEE Symposium on Computers and Communications, 1998.
22. Van Van. A defense against address spoofing using active networks, 1997. MIT Master Thesis.
23. S. Felix Wu, Lixia Zhang, Dan Massey, and Allison Mankin Intension-Driven ICMP Trace-Back. Internet Draft,IETF, February 2001. draft-wu-itrace-intension-00.txt(work in progress).