An active detecting method against SYN flooding attack

Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS

Volumn 1, Issue , 2005, Pages 709-715

  Xiao, Bin ^a   Chen, Wei ^b   He, Yanxiang ^b   Sha, Edwin H M ^c  

^a HONG KONG POLYTECHNIC UNIVERSITY   (Hong Kong)

^b WUHAN UNIVERSITY   (China)

^c The University of Texas at Dallas   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACKING SIGNATURE; DISTRIBUTED DENIAL-OF-SERVICE (DDOS); PASSIVE DETECTION;

NETWORK PROTOCOLS; PACKET NETWORKS; ROUTERS; TELECOMMUNICATION SERVICES;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 23944521338     PISSN: 15219097     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICPADS.2005.67     Document Type: Conference Paper

References (20)

1. S. M. Bellovin. ICMP traceback messages. Technical report, March 2000.
2. S. Branigan, H. Burch, B. Cheswick, and F. Wojcik. What can you do with Traceroute? Internet Computing, IEEE, 5:96, Sept.-Oct. 2001.
3. P. Ferguson and D. Senie. Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing, May 2000.
4. J. Ioannidis and S. M. Bellovin. Implementing pushback: Router-based defense against DDoS attacks. In Proceedings of Network and Distributed System Security Symposium, Catamaran Resort Hotel San Diego, California. The Internet Society, February. 2002.
5. C. Jin, H. N. Wang, and K. G. Shin. Hop-count filtering: An effective defense against spoofed DDoS traffic. In Proceedings of the 10th ACM conference on Computer and communication security(CCS), pages 30-41. ACM Press, October 2003.
6. M. Kalantari, K. Gallicchio, and M. Shayman. Using transient behavior of TCP in mitigation of distributed denial of service attacks. In Proceedings of the 41st IEEE Conference on Decision and Control 2002, volume 2, pages 1422-1427, 10-13 Dec. 2002.
7. A. Keromytis, V. Misra, and D. Rubenstein. SOS: An architecture for mitigating DDoS attacks. IEEE Journal on Selected Areas in Communications, 22:176-188, January 2004.
8. J. Lemon. Resisting SYN flood DoS attacks with a SYN cache. In In Proceedings of the BSDCon 2002 Conference., 11-14 Feb. 2002.
9. D. Moore, G. Voelker, and S. Savage. Inferring internet denial of service activity. In Proceedings of USENIX Security Symposium, Aug. 2001.
10. P. Narvaez, K.-Y. Siu, and H.-Y. Tzeng. New dynamic SPT algorithm based on a ball-and-string model. Networking, IEEE/ACM Transactions, 9:706-718, Dec. 2001.
11. K. Park and H. Lee. On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack. In INFOCOM, pages 338-347, 2001.
12. T. Peng, C. Leckie, and R. Kotagiri. Protection from distributed denial of service attack using history-based IP filtering. In IEEE International Conference on Communications, Anchorage, Alaska, USA, volume 1, pages 482-486, May 11-15 2003.
13. Rocky. K.Chang. Defending against flooding-based distributed denial-of-service attacks: a tutorial. Communications Magazine, IEEE, 40(10):42-51, Oct. 2002.
14. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proceedings of the ACM SIGCOMM Conference, pages 295-306. ACM Press, 2000.
15. C. L. Schuba, I. V. Krsul, M. G. Kuhn, E. H. Spafford, A. Sundaram, and D. Zamboni. Analysis of a denial of service attack on TCP. In Proceedings of the 1997 IEEE Symposium on Security and Privacy, pages 208-223. IEEE Computer Society, IEEE Computer Society Press, May 1997.
16. A. C. Snoeren. Hash-based IP traceback. In Proceedings of the ACM SIGCOMM Conference, pages 3-14. ACM Press, August 2001.
17. M. Sung and J. Xu. IP traceback-based intelligent packet filtering: A novel technique for defending against internet DDoS attacks. IEEE Transactions on Parallel and Distributed Systems, 14(9): 861-872, September 2003.
18. U. Tupakula and V. Varadharajan. Counteracting DDoS attacks in multiple ISP domains using routing arbiter architecture. In Networks ICON2003. The 11th IEEE International Conference, pages 455-460, Sept. 28-Oct. 1 2003.
19. H. Wang, D. Zhang, and K. G. Shin. Detecting SYN flooding attacks. In Proceedings of IEEE INFOCOM, volume 3, pages 1530-1539, June 23-27 2002.
20. A. Yaar, A. Perrig, and D. Song. SIFF: A stateless internet flow filter to mitigate DDoS flooding attacks. In Proceedings. 2004 IEEE Symposium, Security and Privacy, pages 130-143, May 9-12 2004.