Taming IP packet flooding attacks

Computer Communication Review

Volumn 34, Issue 1, 2004, Pages 45-50

  Lakshminarayanan, Karthik ^a   Adkins, Daniel ^a   Perrig, Adrian ^b   Stoica, Ion ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b CMU ^*

Author keywords

[No Author keywords available]

Indexed keywords

EID: 24744468900     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/972374.972383     Document Type: Conference Paper

References (25)

1. D. Adkins, K. Lakshminarayanan, A. Perrig, and I. Stoica. Towards a more functional and secure network infrastructure. Technical Report CSD-03-1242, DC Berkeley, 2003.
2. D. G. Andersen. Mayday: Distributed filtering for Internet services. In USITS, Seattle, WA, 2003.
3. T. Anderson, T. Roscoe, and D. Wetherall. Preventing Internet denial-of-service with capabilities. In Proc. of Hotnets-II, Cambridge, MA, Nov. 2003.
4. T. Aura, P. Nikander, and J. Leiwo. DoS-resistant authentication with client puzzles. In Security Protocols - 8th International Workshop, Lecture Notes in Computer Science, Cambridge, United Kingdom, Apr. 2000. Springer-Verlag.
5. H. Balakrishnan, H. Rahul, and S. Seshan. An integrated congestion management architecture for Internet hosts. In Proc. of ACM SIGCOMM '99, Cambridge, MA, Sept. 1999.
6. S. Bellovin, M. Leech, and T. Taylor. ICMP traceback messages, Internet draft, Work in progress, February 2003.
7. CERT Advisory CA-97.28. IP denial-of-service attacks, Dec. 1997.
8. D. Dean, M. Franklin, and A. Stubblefield. An algebraic approach to IP traceback. Information and System Security, 5(2):119-137, 2002.
9. D. Dean and A. Stubblefield. Using client puzzles to protect TLS. In Proc USENIX Security Symposium, 2001.
10. C. Dwork and M. Naor. Pricing via processing or combatting junk mail. In E. Brickell, editor, Advances in Cryptology - CRYPTO '92, volume 740 of Lecture Notes in Computer Science, pages 139-147. International Association for Cryptologic Research, Springer-Verlag, 1993.
11. V. D. Gligor. A note on the denial of service problem. In Proc. of 1983 Symposium on Security and Privacy, pages 139-149. IEEE, 1983.
12. V. D. Gligor. Guaranteeing access in spite of service-fboding attacks. In Proceedings of the Security Protocols Workshop. Apr. 2003.
13. H. Jamjoom and K. G. Shin. Persistent dropping: An efficient control of traffic aggregates. In Proc. of ACM SIGCOMM '03, pages 287-297, Karlsruhe, Germany, Aug. 2003.
14. A. Juels and J. Brainard. Client puzzles: A cryptographic countermeasure against connection depletion attacks. In Proc. of the Symposium on NDSS, 1999.
15. A. Keromytis, V. Misra, and D. Rubenstein. SOS: Secure Overlay Services. In Proc. of ACM SIGCOMM, Aug. 2002.
16. R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling high bandwith aggregates in the network. ACM Computer Communication Review, 32(3):62-73, July 2002.
17. R. Merkle. Secure communication over insecure channels. Commun. ACM, 21(4):294-299, Apr. 1978.
18. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proc. of ACM SIGCOMM 2000, pages 295-306, Stockholm, Sept. 2000.
19. C. L. Schuba, I. V. Krsul, M. G. Kuhn, and E. H. Spafford. Analysis of a denial of service attack on TCP. In Proc. of IEEE Symposium on Security and Privacy, May 1997.
20. C. Shields. What do we mean by network denial-of-service? In Proc. of the 2002 IEEE Workshop on Information Assurance and Security, West Point, NY, June 2002.
21. D. Song and A. Perrig. Advanced and Authenticated Marking Schemes for IP Traceback. In Proc of IEEE INFOCOM, 2001.
22. I. Stoica, D. Adkins, S. Zhuang, S. Shenker, and S. Surana. Internet Indirection Infrastructure. In Proc. of ACM SIGCOMM 2002, pages 10-20, Pittsburgh, PA, Aug. 2002.
23. L. von Ahn, M. Blum, N. Hopper, and J. Langford. Captcha: Using hard Al problems for security. In Eurocrypt, 2003.
24. X. Wang and M. K. Reiter. Defending against denial-of-service attacks with puzzle auctions. In Proceedings of the 2003 IEEE Symposium on Security and Privacy, May 2003.
25. A. Yaar, A. Perrig, and D. Song. Pi: A Path Identification Mechanism to Defend against DDoS Attacks. In IEEE Symposium on Security and Privacy, May 2003.