An Efficient Filter for Denial-of-Service Bandwidth Attacks

Conference Record / IEEE Global Telecommunications Conference

Volumn 3, Issue , 2003, Pages 1353-1357

  Abdelsayed, Samuel ^a   Glimsholt, David ^a   Leckie, Christopher ^a   Ryan, Simon ^b   Shami, Samer ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

^b TELSTRA RESEARCH LABORATORIES   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

BENCHMARKING; COMPUTATIONAL METHODS; COMPUTER CRIME; COST EFFECTIVENESS; HEURISTIC METHODS; NETWORK PROTOCOLS; PACKET NETWORKS; PROBLEM SOLVING; ROUTERS;

DENIAL-OF-SERVICE (DOS) BANDWIDTH ATTACKS; RATE COUNTERS; TABULATED ONLINE PACKET STATISTICS (TOPS);

BANDWIDTH;

EID: 0842332412     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. B. Bloom. "Space/time trade-offs in hash coding with allowable errors." In Communications of the ACM, Vol. 13 No. 7, July 1970, pp. 422-426.
2. R. Chang. "Defending against flooding-based distributed denial-of-service attacks: a tutorial." In IEEE Communications Magazine, Vol. 40 No. 10, Oct 2002, pp. 42-51.
3. P. Ferguson and D. Senie. "Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing." RFC2827, May 2000, http://www.ietf.org/rfc/rfc2827.txt.
4. L. Garber. "Denial-of-service attacks rip the internet." In IEEE Computer, Vol. 33 No. 4, April 2000, pp. 12-17.
5. T. Gil and M. Poletto. "MULTOPS: a data-structure for bandwidth attack detection." In Proceedings of the 10th USENIX Security Symposium, August 2001, Washington D.C., USA.
6. J. Ioannidis and S. Bellovin. "Implementing Pushback: Router-Based Defense Against DDoS Attacks." In Proceedings of the Network and Distributed System Security Symposium (NDSS 2002), February 2002.
7. K. Kendall. "A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems." Master's Thesis, Department of Electrical Engineering and Computer Science, Massachusetts Institute of Technology, 1998.
8. R. Lippmann, et al. "Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation." In Proceedings of the Third International Workshop on Recent Advances in Intrusion Detection (RAID 2000), pp. 162-182.
9. K. Park and H. Lee. "On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack." In Proceedings of IEEE INFOCOM 2001, April 2001, Anchorage, Alaska, USA, Vol. 1, pp. 338-347.
10. T. Peng, C. Leckie and R. Kotagiri. "Adjusted Probabilistic Packet Marking for IP Traceback." In Proceedings of the Second IFIP Networking Conference (Networking 2002), 19-24 May 2002, Pisa, Italy.
11. T. Peng, C. Leckie and R. Kotagiri. "Protection from Distributed Denial of Service Attack Using History-based IP Filtering." To appear in the IEEE International Conference on Communications (ICC 2003), 11-15 May 2003, Anchorage, Alaska, USA.
12. S. Savage, D. Wetherall, A. Karlin and T. Anderson. "Network support for IP traceback." In IEEE/ACM Transactions on Networking, Vol. 9 No. 3, June 2001, pp. 226-237.
13. D. Song and A. Perrig. "Advanced and authenticated marking schemes for IP traceback." In Proceedings of IEEE INFOCOM 2001, April 2001, Anchorage, Alaska, USA, Vol. 2, pp. 878-886.