Roaming honeypots for mitigating service-level denial-of-service attacks

Proceedings - International Conference on Distributed Computing Systems

Volumn 24, Issue , 2004, Pages 328-337

  Khattab, Sherif M ^a   Sangpachatanaruk, Chatree ^b   Mossé, Daniel ^a   Melhem, Rami ^a   Znati, Taieb ^a,b  

^a University of Pittsburgh   (United States)

^b UNIVERSITY OF PITTSBURGH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SIMULATION; COMPUTER SYSTEM FIREWALLS; INTERNET; PACKET NETWORKS; SERVERS; SWITCHES; TELECOMMUNICATION TRAFFIC;

DENIAL-OF-SERVICE (DOS) ATTACKS; HONEYPOTS; SERVER SWITCHES;

COMPUTER CRIME;

EID: 2442597231     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icdcs.2004.1281598     Document Type: Conference Paper

References (37)

1. Akamai Corporation, http://www.akamai.com.
2. Labrea - the tarpit. http://hts.dshield.org/LaBrea/.
3. NetSec Group. http://www.cs.pitt.edu/NETSEC.
4. Snort, http://www.snort.com.
5. The Network Simulator - ns-2. http://www.isi.edu/nsnam/ns/.
6. CERT. Denial of Service Attacks. http://www.cert.org/tech_tips/ denial_of_service.html, 1997.
7. B.-G. Chun, P. Mehra, and R. Fonseca. DAM: a DoS Attack Mitigation Infrastructure. Under Submission, January 2003.
8. P. Dewan, P. Dasgupta, and V. Karamcheti. Defending against Denial of Service attacks using Secure Name resolution. In Proceedings of SAM 2003.
9. P. Ferguson and D. Senie. Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing. In RFC 2827, May 2001.
10. A. Hussain, J. Heidemann, and C. Papadopoulos. A Framework for Classifying Denial of Service Attacks. In ACM SIGCOMM 2003.
11. J. Jones. Distributed Denial of Service Attacks: Defenses, A Special Publication. Technical report, Global Integrity, 2000.
12. A. Juels and J. Brainard. Client Puzzles: A Cryptographic Countermeasure Against Connection Depletion Attacks. In Proceedings of NDSS'99.
13. A. Keromytis, V. Misra, and D. Rubenstein. SOS: Secure Overlay Services. In ACM SIGCOMM, 2002.
14. S. M. Khattab, C. Sangpachatanaruk, R. Melhem, D. Mosse', and T. Znati. Proactive Server Roaming for Mitigating Denial-of-Service Attacks. In Proceedings of ITRE'03.
15. A. Kuzmanovic and E. W. Knightly. Low-Rate TCP-Targeted Denial of Service Attacks. (The Shrew vs. the Mice and Elephants). In ACM SIGCOMM 2003.
16. J. Levine, R. LaBella, H. Owen, D. Contis, and B. Culver. The Use of Honeynets to Detect Exploited Systems Across Large Enterprise Networks. In Proceedings of the 2002 IEEE Workshop on Information Assurance and Security.
17. R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis,. V. Paxson, and S. Shenker. Controlling high bandwidth aggregates in the network. In ACM SIGCOMM Computer Communication Review, volume 32, pages 62-73. ACM Press, 2002.
18. J. Mirkovic, J. Martin, and P. Reiher. A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms. Technical Report 020018, Computer Science Department, University of California, Los Angeles, 2002.
19. J. Mirkovic, G. Prier, and P. Reiher. Attacking DDoS at the Source. In Proceedings of ICNP 2002.
20. R. Morris. A Weakness in the 4.2BSD Unix TCP/IP Software. Technical Report 117, AT&T Bell Labs Computer Science, 1985.
21. T. Peng, C. Leckie, and K. Ramamohanarao. Defending against distributed denial of service attack using selective pushback. In Proceedings of ICT 2002.
22. T. H. Project. Know Your Enemy. Addison-Wisley, Indianapolis, IN, 2002.
23. R. Rivest. The MD5 message-digest algorithm. In RFC 1321, 1992.
24. R. L. Rivest and A. Shamir. PayWord and MicroMint-Two Simple Micropayment Schemes. In M. Lomas, editor, Proceedings of 1996 International Workshop on Security Protocols, number 1189 in Lecture Notes in Computer Science, pages 69-87. Springer, 1996.
25. C. Sangpachatanaruk, S. M. Khattab, T. Znati, R. Meinem, and D. Mosse'. A Simulation Study of the Proactive Server Roaming for Mitigating Denial of Service Attacks. In Proceedings of ANSS'03.
26. C. Shields. What do we mean by Network Denial of Service? In Proceedings of the 2002 IEEE Workshop on Information Assurance and Security.
27. A. C. Snoeren, H. Balakrishnan, and M. F. Kaashoek. The Migrate Approach to Internet Mobility. In Proc. of the Oxygen Student Workshop, July 2001.
28. S. Staniford, V. Paxson, and N. Weaver. How to Own the Internet in your spare time. In Proceedings of the 11th USENIX Security Symposium, August 2002.
29. I. Stoica, D. Adkins, S. Zhaung, S. Shenker, and S. Surana. Internet Indirection Infrastructure. In ACM SIGCOMM 2002.
30. I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan. Chord: A Scalable Peer-to-peer Lookup Service for Internet Applications. In ACM SIGCOMM 2001.
31. F. Sultan, K. Srinivasan, D. Iyer, and L. Iftode. Migratory TCP: Connection Migration for Service Continuity in the Internet. In Proceedings of ICDCS 2002.
32. X. Wang and M. K. Reiter. Defending against denial-of-service attacks with puzzle auctions. In Proceedings of the 2003 IEEE Symposium on Security and Privacy, May 2003.
33. N. Weiler. Honeypots for distributed denial-of-service attacks. In Proceedings of WET ICE 2002.
34. C. K. Wong, M. Gouda, and S. Lam. Secure Group Communications Using Key Graphs. In ACM SIGCOMM 1998.
35. A. Yaar, A. Perrig, and D. Song. Pi: A Path Identification Mechanism to Defend against DDoS Attacks. In Proceedings of IEEE Symposium on Security and Privacy, May 2003.
36. J. Yan, S. Early, and R. Anderson. The XenoService - A Distributed Defeat for Distributed Denial of Service. In Proceedings of ISW 2000.
37. L. Zhou, F. Schneider, and R. van Renesse. COCA: A Secure Distributed On-line Certification Authority. Technical report, Department of Computer Science, Cornell University, Ithaca, NY USA, 2000.