Defeating Distributed Denial-of-Service Attack with Deterministic Bit Marking

GLOBECOM - IEEE Global Telecommunications Conference

Volumn 3, Issue , 2003, Pages 1363-1367

  Kim, Yoohwan ^a   Jo, Ju Yeon ^b   Merat, Frank L ^a  

^a CASE WESTERN RESERVE UNIVERSITY   (United States)

^b CALIFORNIA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SIMULATION; INTERNET; MATHEMATICAL TECHNIQUES; NETWORK PROTOCOLS; PACKET NETWORKS; PROBABILITY; ROUTERS;

DENIAL-OF-SERVICE (DOS) ATTACKS; DETERMINISTIC BIT MARKING (DBM); INTERNET TOPOLOGY; PATH SIGNATURE (PS) DISTRIBUTION; RATE-LIMITING SCHEMES;

COMPUTER CRIME;

EID: 0842310839     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. American Registry for Internet Numbers IP network dump, Feb. 2003. ftp://rs.arin.net/netinfo.
2. AS Graph Data Sets, "The Origin of Power-Laws in Internet Topologies Revisited," http://topology.eecs.umich.edu/data.html
3. S. Bellovin, M. Leech, and T. Taylor, "ICMP Traceback Messages," draft-ietf-itrace-01.txt, Internet draft, work in progress, October 2001.
4. R. Braden, D. Borman, and C. Partridge, "Computing the Internet Checksum," RFC 1071, September 1988.
5. Cisco IOS Security Configuration Guide, "Configuring Unicast Reverse Path Forwarding," pp. SC-429 ∼ SC-446, http://www.cisco.com.
6. P. Ferguson and D. Senie, "Network Ingress Filtering: Defeating Denial of Service Attacks which Employ IP Source Address Spooling," RFC 2827, 2000.
7. L. Garter, "Denial-of-Service Attacks Rip the Internet", IEEE Computer, April 2000, pp. 12-17
8. M. T. Goodrich, "Efficient Packet Marking for Large-Scale IP Traceback," In Proceedings of ACM CCS, November 2002.
9. Y. Huang and J.M. Pullen, "Countering Denial-of-Service Attacks Using Congestion Triggered Packet Sampling and Filtering," In Proceedings of Computer Communications and Networks, 2001.
10. J. Ioannidis and S.M. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks," In Proceedings. of Network and Distributed System Security Symposium, February 2002.
11. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites," In Proceedings of the International World Wide Web Conference, May 2002.
12. D. Kashiwa, E.Y. Chen and H. Fuji, "Active Shaping: A Countermeasure against DDoS Attacks," In Proc. of European Conference on Universal Multiservice Networks, 2002.
13. Y. Kim, J.-Y. Jo, H. J. Chao, and F.L. Merat, "High-speed router filter for blocking TCP flooding under Distributed Denial-of-Service attack", International performance, Computing and communications Conference, phoenix, Arizona, April 2003.
14. th IEEE International Conference on Network Protocols, November 2002.
15. K. Park and H. Lee, "On the Effectiveness of Probabilistic Packet Marking for IP Traceback under Denial of Service Attack," In Proceedings of IEEE Infocom, April 2001.
16. V. Paxson, "An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks," Computer Communication Review vol. 31 no. 3, July 2001.
17. M. Poletto, A. Gorelik, and R. Morris, "Practical Approaches to Dealing with DDoS Attacks," NANOG22, May 2001.
18. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Network Support for IP Traceback," IEEE/ACM Transactions on Networking, vol. 9, no. 3, June 2001
19. A. Snoeren, C. Partridge, L.A. Sanchez, C.E. Jones, F. Tchakountio, S.T. Kent, and W.T. Strayer, "Hash-based IP Traceback," In Proceedings of ACM SIGCOMM, August 2001.
20. Y.Xiong, S. Liu, and P. Sun, "On the Defense of the Distributed Denial of Service Attacks: An On-Off Feedback Control Approach," IEEE Transactions on Systems, Man, and Cybernetics-Part A: Systems and Humans, Vol. 31, No. 4. pp. 282-293, July 2001.
21. D.K.Y. Yau, J.C.S. Lui, and F. Liang, "Defending Against Distributed Denial-of-Service Attacks with Max-min Fair Server-centric Router Throttles," In Proceedings of IEEE International Workshop on Quality of Service, pp. 35-42, 2002.
22. th Annual Computer Security Applications Conference, December 2002.