Counteracting TCP SYN DDoS attacks using automated model

GLOBECOM - IEEE Global Telecommunications Conference

Volumn 4, Issue , 2004, Pages 2240-2244

  Tupakula, Udaya Kiran ^a   Varadharajan, Vijay ^a   Gajam, Ashok Kumar ^a  

^a MACQUARIE UNIVERSITY   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; CLIENT SERVER COMPUTER SYSTEMS; DATA STRUCTURES; GRAPHICAL USER INTERFACES; MATHEMATICAL MODELS; PACKET NETWORKS; ROUTERS; SERVERS;

ATTACK SIGNATURE; ATTACK TRAFFIC; DISTRIBUTED DENIAL OF SERVICE (DDOS); INTRUSION DETECTION SYSTEMS;

SECURITY OF DATA;

EID: 18144370750     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Computer emergency response team. CERT advisory CA-2000-01 denial-of-servioe developments. http://www.cert.org/advisories/CA-2000-01.html, Jan.2000.
2. Computer emergency response team. CERT advisory CA-1999-17 denial-of-service tools. http://www.cert.Org/advisories/CA-1999-17.html.
3. th Usenix Security Symposium, August 2000.
4. Ratul Mahajan, Steven M.Bellovin, Sally Floyd, John Ioannidis, Vern Paxson, and Scott Shenker, "Controlling high bandwidth aggregates in the network," Draft, February 2001.
5. Udaya Kiran Tupakula, Vijay Varadharajan, "A practical method to counteract denial of service attacks," In proceedings of the twenty -fifth Australasian computer science conference ACSC2003, Australia. Feb 2003.
6. th IEEE International Conference on Networks ICON2003, Australia. Sept 2003.
7. J.Postel : Internet protocol. RFC 791,Sept.1981.
8. Computer emergency response team. CERT advisory CA-1996-21 TCP SYN flooding and IP Spoofing Attacks. http://www.cert.org/advisories/CA-1996-21. html.
9. D.J.Bernstein and Eric Schenk, "Linux Kernel SYN Cookies Firewall Project", http://www.bronzesoft.org/projects/scfw.
10. Check Point Software Technologies Ltd. SynDefender: http://www. checkpoint.com/products/firewall-l.
11. J.Lemon, "Resisting SYN Flooding DoS Attacks with a SYN Cache", Proceedings of USENIX BSDCon'2002, February 2002.
12. Netscreen 100 Firewall Appliance, http://www.netscreen.com/.
13. C.L.Schuba, I.V.Krsul, M.G.Kuhn, E.H.Spafford, A.Sundaram and D.Zamboni, "Analysis of a Denial of Service Attack on TCP", Proceedings of IEEE Symposium on Security and Privacy, May 1997.
14. Phrack magazine, issue 48-File 13of 18, "Project Neptune", Author: daemon9/route/infinity for Phrack Magazine. Date: July 1996 Guild Productions, Kid. http://www.fc.net/phrack/files/p48/p48-13.html.
15. T.Darmohray and R.Oliver, "Hot Spares for DoS attacks", http.//www.usenix.org/publications/login/2000-7/apropps.html.
16. www.cisco.com
17. www.hp.com
18. www.symantec.com
19. www.kiwisyslog.com/software_downloads.htm