A source identification scheme against DDoS attacks in cluster interconnects

Proceedings of the International Conference on Parallel Processing Workshops

Volumn , Issue , 2004, Pages 354-362

  Lee, Manhee ^a   Kim, Eun Jung ^a   Lee, Cheol Won ^b  

^a TEXAS A AND M UNIVERSITY   (United States)

^b National Security Research Institute (NSRI)   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

CLUSTER INTERCONNECTS; DETERMINISTIC DISTANCE PACKET MARKING (DDPM); DISTRIBUTED DENIAL OF SERVICES (DDOS); INTRUSION DETECTION SYSTEM (IDS));

COMPUTER SYSTEM FIREWALLS; INTERFACES (COMPUTER); NETWORK PROTOCOLS; PACKET NETWORKS; QUALITY OF SERVICE; SECURITY OF DATA; SERVERS; TELECOMMUNICATION SERVICES;

INTERNET;

EID: 10044259776     PISSN: 15302016     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICPPW.2004.1328039     Document Type: Conference Paper

References (21)

1. H. Burch and B. Cheswick, "Internet watch: Mapping the Internet," Computer, 32(4):97-98, Apr. 1999.
2. H. Burch and B. Cheswick, "Tracing Anonymous Packets to Their Approximate Source," Unpublished paper, Dec. 1999.
3. Caida. Skitter, http://www.caida.org/tools/measurement/-skitter/, 2000.
4. "CERT/CC, CERT Advisory CA-2001-26 Nimda Worm," http://www.cert.org/advisories/CA-2001-26.html, Sept. 2001.
5. "Computer emergency response team, cert advisory ca-2000-01: Denial-of-service developments," http://www.cert.org/advisories/CA-2000-01. html, 2000.
6. Kay Connelly and Andrew A. Chien, "Breaking the Barriers: High Performance Security for HighPerformance Computing," in New Security Paradigms Workshop '02, 2000.
7. Sven Dietrich, Neil Long, and David Dittrich, "Analyzing distributed denial of service attack tools: The shaft case," in 14th Systems Administration Conference, LISA 2000, 2000.
8. Rossen Dimitrov and Matthew Gleeson, "Challenges and New Technologies for Addressing Security in High Performance Distributed Environments," in Proceedings of the 21st National Information Systems Security Conference 457-468.
9. Dave Dittrich, "Distributed Denial of Service (DDoS) attacks/tools resource," http://staff.washington.edu/ittrich/misc/ddos/, 2000.
10. P. Ferguson and D. Senie, "Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing," Internet RFC 2267, Jan. 1998.
11. L. Garber, "Denial-of-Service Attack Rip the Internet," Computer, April 2000.
12. K. Houle and G. Weaver, "Trends in Denial of Service Attack Technology," http://www.cert.org/, October 2001.
13. Foster Ian, Nicholas Karonis, Carl Kesselman and Steven Tuecke, "Managing Security in High- Performance Distributed Computations," Cluster Computing, Vol 1, issue 1, pages 95-107, 1998.
14. Internet mapping, http://research.lumeta.com/ches/map/, 2002.
15. A. Machie, J. Roculan, R. Russell, and M. V. Velzen, "Nimda Worm Analysis," Tech. Rep., Incident Analysis, SecurityFocus, Sept. 2001.
16. D. Song, R. Malan, and R. Stone, "A Snapshot of Global Internet Worm Activity," Tech. Rep., Arbor Networks, Nov.2001.
17. Dawn X. Song and Adrian Perrig, "Advanced and Authenticated Marking Schemes for IP Traceback," in Proceedings of INFOCOM 2001, 2001.
18. R. Russell and A. Machie, "Code Red II Worm," Tech. Rep., Incident Analysis, SecurityFocus, Aug. 2001.
19. Stefan Savage, David Wetherall, Anna Karlin, and Tom Anderson, "Practical Network Support for IP Traceback," in Proceedings of SIGCOMM 2000, 2000.
20. Abraham Yaar, Adrian Perrig, and Dawn Song, "Pi: A Path Identification Mechanism to Defend against DDoS Attacks," in Proceedings of the IEEE Symposium on Security and Privacy 2003, 2003
21. "Attackers infiltrating supercomputer networks," http://news.com.com/2100-7349-191024.html?tag=sas.email, 2004.