Defending against low-rate TCP attacks: Dynamic detection and protection

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2004, Pages 196-205

  Sun, Haibin ^a   Lu, John C S ^a   Yau, David K Y ^b  

^a CHINESE UNIVERSITY OF HONG KONG   (Hong Kong)

^b PURDUE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DYNAMIC DETECTION; FILE TRANSFERS; RETRANSMISSION TIMEOUT (RTO); TIME WARPING METHODS;

COMPUTER SOFTWARE; CONGESTION CONTROL (COMMUNICATION); PACKET NETWORKS; RESOURCE ALLOCATION; ROBUSTNESS (CONTROL SYSTEMS); ROUTERS; USER INTERFACES;

NETWORK PROTOCOLS;

EID: 17744379157     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (16)

1. Blackhole route server and tracking traffic on an IP network. http://www.secsup.org/Tracking.
2. TCP SYN fboding and IP spoofi ng attacks. CERT Advisory CA-96.21. available at http://www.cert.org/.
3. Smurf IP denial-of-service attacks. CERT Advisory CA-1998-01, January 1998. available at www.cert.org/advisories/CA-98.01.html.
4. M. Allman and V. Paxson. On estimating end-to-end network path properties. In Proc. ACM SIGCOMM, Vancouver, Canada, September 1999.
5. D. Katabi, M. Handley, and C. Rohrs. Congestion control for high bandwidth-delay product networks. In Proc. ACM SIGCOMM, Pittsburgh, PA, August 2002.
6. E. Keogh. Exact indexing of dynamic time warping. In Proc. of the 28th VLDB Conference, China, Aug. 2002.
7. A. Kuzmanovic and E. Knightly. Low-rate TCP-targeted denial of service attacks. In Proc. ACM SIGCOMM, Karlsruhe, Germany, August 2003.
8. R. Mahajan, S. Floyd, and D. Wetherall. Controlling high-bandwidth fbws at the congested router. In Proc. ICNP, Riverside, CA, November 2001.
9. H. Sakoe and H. Chiba. Dynamic programming algorithm optimization for spoken word recognition. IEEE Trans. Acoustics, Speech, and Signal Proc., 26(1), Feb. 1978.
10. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proc. ACM SIGCOMM, Stockholm, Sweden, August 2000.
11. M. Shreedhar and G. Varghese. Efficient fair queueing using défi cit round robin. IEEE/ACM Transactions on Networking., 4(3), June 1996.
12. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, and W. T. Strayer. Hash-based ip traceback. In ACM SIGCOMM, San Diego, August 2001.
13. D. Song and A. Perrig. Advanced and authenticated techniques for IP traceback. In Proc. IEEE Infocom, Anchorage, Alaska, 2001.
14. H. Sun, J. C. Lui, and D. K. Yau. Defending against low-rate tcp attack: Dynamic detection and protection. In CS&E Tech. Report, CUHK, 2004.
15. G. Yang, M. Gerla, and M. Y. Sanadidi. Defense against low-rate TCP-targeted denial-of-service attacks. In Proc. ISCC, Alexandria, Egypt, 2004.
16. D. K. Yau, J. C. Lui, F. Liang, and Y. Yeung. Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles. Accepted for publication in IEEE/ACM Transactions on Networking, 13(1), February 2005.