A new marking scheme to defend against distributed denial of service attacks

GLOBECOM - IEEE Global Telecommunications Conference

Volumn 4, Issue , 2004, Pages 2256-2260

  Gao, Zhiqiang ^a   Ansari, Nirwan ^a   Anantharam, Karunakar ^a  

^a NEW JERSEY INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

DoS DDoS attack; Four color theorem; Marking; Network security

Indexed keywords

COMPUTER SIMULATION; HAPTIC INTERFACES; INFORMATION ANALYSIS; INTERNET; MATHEMATICAL MODELS; NETWORK PROTOCOLS; SECURITY SYSTEMS; THEOREM PROVING; TREES (MATHEMATICS);

DOS/DDOS ATTACK; FOUR COLOR THEOREM; MARKING; NETWORK SECURITY;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 18144374514     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Computer Security Institute and Federal Bureau of Investigation, "2003 CSI/FBI Computer Crime and Security Survey," Sep. 2003. http://www.securitymanagement.com/library/CSI_Fbi0903.pdf.
2. D Moore, G. Voelker, and S. Savage, "Inferring Internet Denial-of-Service Activity," USENIX Security Symposium, Washington, D.C., Aug. 2001.
3. H. Wang, D. Zhang, and K. Shin, "Detecting SYN flooding Attacks," IEEE INFOCOM 2002, Jun. 2002, pp. 1530-1539.
4. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Network Support for IP Traceback," IEEE/ACM Trans. Networking, vol. 9, pp. 226-237, Jun. 2001.
5. A. C. Snoeren, C. Partridge, et al., "Single Packet IP Traceback," IEEE/ACM Trans. Networking, vol 10, pp. 721-734, Dec. 2002.
6. D. Song and A. Perriag, "Advanced and Authenticated Marking Schemes for IP traceback," INFOCOM 2001, pp. 878-886.
7. M Sung and J. Xu, "IP traceback-based intelligent packet filtering: a novel technique for defending against Internet DDoS attacks," IEEE Trans. Parallel & Distributed Systems, vol. 14, Sep. 2003, pp. 861-872.
8. A Belenky and N. Ansari, "IP Traceback with Deterministic Packet Marking," IEEE Comm. Letters, vol. 7, no. 4, pp. 162-164, Apr. 2003.
9. S. Bellovin, "ICMP Traceback Messages," IETF Draft, Mar. 2000. [Online]. Available: http://www.research.att.com/smb/papers/draft-bellovin- itrace-00.txt.
10. A. Yaar, A Perriag, and D. Song, "Pi: A Path Identification Mechanism to Defend against DDoS Attacks," IEEE Symposium Privacy and Security, May 2003.
11. CAIDA. http://www.caida.org/tools/measurement/iffinder.
12. T. Satty, "The four-color problem: assaults and conquest", New York: Dover Publications, 1986.
13. Galtech, Four Color Theorem. [Online]. Available: http://www.math.gatech. edu/~thomas/FC/fourcolor.html.
14. L.Gao, "On inferring autonomous system relationships in the Internet," IEEE/ACM Trans. Networking, vol. 9, pp. 733-745, Dec. 2001.
15. L. Subramanian, S. Agarwal; J. Rexford, and R. Katz, "Characterizing the Internet hierarchy from multiple vantage points," IEEE INFOCOM 2002, vol. 2, Jun. 2002, pp. 618-627.
16. L.Gao and J. Rexford, "Stable Internet Routing without Global Coordination," IEEE/ACM Trans. Networking, vol. 9, pp. 681-692, Dec. 2001.
17. J. Ioannidis and S. Bellovin, "Implementing Pushback: Router-based Defense Against DDoS Attacks," Symposium Network & Distributed System (NDSS'02), San Diego, CA, Feb. 2002.
18. Y. Xiong, S. Liu and P. Sun, "On the defense of the distributed denial of service attacks: an on-off feedback control approach," IEEE Trans. Systems, Man and Cybernetics, vol. 31, Jul. 2001, pp. 282-293.
19. W. Theilmann and K. Rothermel, "Dynamic distance maps of the Internet," Proc. IEEE INFOCOM, vol. 1, Mar. 2000, pp. 275-284.