Preventing internet denial-of-service with capabilities

Computer Communication Review

Volumn 34, Issue 1, 2004, Pages 39-44

  Anderson, Tom ^a   Roscoe, Timothy ^b   Wetherall, David ^a  

^a UNIVERSITY OF WASHINGTON   (United States)

^b INTEL RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DENIAL-OF-SERVICE (DOS); SECURITY INFRASTRUCTURE;

COMPUTER ARCHITECTURE; NETWORK PROTOCOLS; PACKET NETWORKS; TELECOMMUNICATION TRAFFIC;

INTERNET;

EID: 18144411533     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/972374.972382     Document Type: Conference Paper

References (21)

1. D. Andersen. Mayday: Distributed Filtering for Internet Services. In P roc. of USITS 2003.
2. P. Barford, J. Kline, D. Plonka, and A. Ron. A Signal Analysis of Network Traffic Anomalies. In Proc. Internet Measurement Workshop 2002.
3. S. Bellovin. ICMP Traceback Messages. http://www.research.att.com/~smb/ papers/draft-bellovin-itrace-00.txt, Internet Draft), 2000.
4. M. Blumenthal and D. Clark. Rethinking the design of the Internet: The end to end arguments vs. the brave new world. In B. Compaine and S. Greenstein, editors, Communications Policy in Transition: The Internet and Beyond. MIT Press, 2001.
5. P. Ferguson and D. Senie. Network Ingress Filtering: Defeating Denial of Service Attacks that Employ IP Source Address Spoofi ng. Internet RFC 2827, 2000.
6. A. Hussain, J. Heidemann, and C. Papadopolous. A Framework for Classifying Denial of Service Attacks. In Proc. ACM SIGCOMM 2003.
7. J. Ioannidis and S. Bellovin. Implementing Pushback: Router-Based Defense Against DoS Attacks. In Network and Distributed System Security Symposium, 2002.
8. A. Keromytis, V. Misra, and D. Rubenstein. SOS: Secure Overlay Services. In Proc. ACM SIGCOMM 2002.
9. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek. The click modular router. ACM Transactions on Computer Systems, 18(3):263-297. Aug. 2000.
10. R. Mahajan, S. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling High Bandwidth Aggregates in the Network. Computer Communications Review, 32(3), July 2002.
11. Mazu Networks. Self-Optimizing Network Traffic Security, http://www.mazunetworks.com/nts.html, 2003.
12. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. The Spread of the Sapphire/Slammer Worm, http://www.cs.berkeley.edu/~nweaver/ sapphire/, Jan. 2003.
13. D. Moore, C. Shannon, and J. Brown. Code Red: A Case Study on the Spread and Victims of an Internet Worm. In Proc. Internet Measurement Workshop 2002.
14. D. Moore, C. Shannon, G. Voelker, and S. Savage. Internet quarantine: Requirements for containing self-propagating code. In Proc. IEEE Infocom 2003.
15. D. Moore, G. Voelker, and S. Savage. Inferring Internet Denial of Service Activity. In Proc. Usenix Security Symposium 2001.
16. K. Park and H. Lee. On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets. In Proc. ACM SIGCOMM 2001.
17. L. Peterson, D. Culler, T. Anderson, and T. Roscoe. A Blueprint for Introducing Disruptive Technology into the Internet. In Proc. HotNets-1, 2002.
18. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical Network Support for IP Traceback. In Proc. ACM SIGCOMM 2000.
19. A. Snoeren, C. Partridge, L. Sanchez, C. Jones, F. Tchakountio. S. Kent, and W. Strayer. Hash-Based IP Traceback. In Proc. ACM SIGCOMM 2001.
20. R. Stone. CenterTrack: An IP Overlay Network for Tracking DoS Floods. In Proc. Usenix Security Symposium 2000.
21. L. Zhang, S. Deering, D. Estrin. S. Shenker, and D. Zappala. RSVP: A New Resource Reservation Protocol. IEEE Network, Sept. 1993.