Timing analysis of TCP servers for surviving denial-of-service attacks

Proceedings of the IEEE Real-Time and Embedded Technology and Applications Symposium, RTAS

Volumn , Issue , 2005, Pages 541-549

  Nandivada, V Krishna ^a   Palsberg, Jens ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DENIAL-OF-SERVICE ATTACKS; KERNEL; MONITORING TOOLS; SERVER SOFTWARE;

AUTOMATA THEORY; BUFFER STORAGE; COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; COMPUTER SYSTEM FIREWALLS; SERVERS;

NETWORK PROTOCOLS;

EID: 24944588916     PISSN: 15453421     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (45)

1. Transmission control protocol. In RFC 793. 1981.
2. Portable execution time analysis for risc-processors. In ACM SIGPLAN Workshop on Language, Compiler and Tool Support for Real-Time Systems, 1994.
3. Cert advisory. www.cert.org/advisories/CA-1996-21.html, 1996.
4. GNU C compiler, gcc.gnu.org, 2004.
5. R. Alur, L.J. Jagadeesan, J.J. Kott, and J.E. Von Olnhausen. Model-checking of real-time systems: a telecommunications application. In Proceedings of the International Conference on Software Engineering, 1997.
6. Rajeev Alur and David L. Dill. A theory of timed automata. Theoretical Computer Science, 126(2): 183-235, 1994.
7. Rajeev Alur, Alon Itai, Robert P. Kurshan, and Mihalis Yannakakis. Timing verification by successive approximation. In Computer Aided Verification, pages 137-150, 1992.
8. Netscreen 100 Firewall Appliance, www.netscreen.com.
9. Stefano Avallone, Antonio Pescapé, and Giorgio Ventre. Distributed internet traffic generator (D-ITG): analysis and experimentation over heterogeneous networks. In ICNP 2003 poster Proceedings, International Conference on Network Protocols, Atlanta, Georgia, November 2003.
10. Johan Bengtsson, W. O. David Griffioen, Kåre J. Kristoffersen, Kim G. Larsen, Fredrik Larsson, Paul Pettersson, and Wang Yi. Automated analysis of an audio control protocol using UPPAAL. Journal of Logic and Algebraic Programming, 52-53:163-181, July-August 2002.
11. Johan Bengtsson, Kim G. Larsen, Fredrik Larsson, Paul Pettersson, and Wang Yi. UPPAAL - a tool suite for automatic verification of real-time systems. In Proceedings of Workshop on Verification and Control of Hybrid Systems III, October 1995.
12. Lawrence S. Brakmo and Larry L. Peterson. Experiences with network simulation. In Measurement and Modeling of Computer Systems, pages 80-90, 1996.
13. Dennis Brylow and Jens Palsberg. Deadline analysis of interruptdriven software. IEEE Transactions on Software Engineering, 30(10):634-655, 2004.
14. Hal Burch and Bill Cheswick. Tracing anonymous packets to their approximate source. In Proceedings of the USENIX Large Installation Systems Administration Conference, pages 319-327, December 2000.
15. Chen-Mou Cheng, H.T. Kung, and Koan-Sin Tan. Use of spectral analysis in defense against DoS attacks. In Proceedings of the IEEE GLOBECOM, Taipei, Taiwan, 2002.
16. Matteo Corti, Roberto Brega, and Thomas Gross. Approximation of worst-case execution time for preemptive multitasking systems. In Proceedings of LCTES'00, Languages, Compilers, and Tools for Embedded Systems, LNCS 1985, 2000.
17. C. Daws, A. Olivero, S. Tripakis, and S. Yovine. The tool KRONOS. In Proceedings of DIMACS/SYCON Workshop on Hybrid Systems III: Verification and Control, pages 208-219. Springer-Verlag, 1996.
18. Dennis. Attack on RIAA, January 2003. www.cdfreaks.com/news/5583.
19. Adam Dunkels. Full tcp/ip for 8-bit architectures. In Proceedings of the first international conference on mobile applications, systems and services, pages 218-227, May 2003.
20. Christian Ferdinand, Reinhold Heckmann, Marc Langenbach, Florian Martin, Michael Schmidt, Henrik Theiling, Stephan Thesing, and Reinhard Wilhelm. Reliable and precise wcet determination for a real-life processor. In Proceedings of the First International Workshop on Embedded Software, pages 469-485. Springer-Verlag, 2001.
21. Aman Garg and A. L. Narasimha Reddy. Mitigation of DOS attacks through QOS regulation. In Proceedings of IWQOS'02, May 2002.
22. A. Heybey. The network simulator. September 1990.
23. John loannidis and Steven M. Bellovin. Implementing pushback: Router-based defense against DDoS attacks. In Proceedings of Network and Distributed System Security Symposium, February 2002.
24. S. Keshav. Real: A network simulator. 1988.
25. Sung-Kwan Kim, Sang Lyul Min, and Rhan Ha. Efficient worst case timing analysis of data caching. In Proceedings of the IEEE Real-Time Technology and Applications Symposium, pages 230-240, June 1996.
26. Kim G. Larsen, Paul Pettersson, and Wang Yi. Model-Checking for Real-Time Systems. In Proc. of Fundamentals of Computation Theory, number 965 in Lecture Notes in Computer Science, pages 62-88, August 1995.
27. J. Lemon. Resisting syn flooding DoS attacks with a syn cache. In Proceedings of USENIX BSDConference, 2002.
28. Robert Lemos. Internet warning system attacked, May 2001. news.com.com/2100-1001-258142.html.
29. Robert Lemos. White House website attacked, May 2001. news.com.com/2100-1001_3-257068.html.
30. R. Mahajan, S. Bellovin, S. Floyd, J. Vern, and P. Scott. Controlling high bandwidth aggregates in the network, 2001.
31. D. Moore, G. Voelker, and S.Savage. Inferring internet denial of service activity. In Proceedings of USENIX Security Symposium, 2001.
32. Ed Nisley. Life support. Dr. Dobb's Journal, November 2001. www.ddjembedded.com/resources/articles/2001/0111n/0111n.htm.
33. Greger Ottosson and Mikael Sjödin. Worst-case execution time analysis for modem hardware architectures. 1997.
34. Stefan Petters and Georg Färber. Making worst case execution time analysis for hard real-time tasks on state of the art processors feasible. In Proceedings of 6th International Conference on Real-Time Computing Systems and Applications, 1999.
35. Peter Reiher, Jelena Mirkovic, and Greg Prier. Attacking DDoS at the source. In Proceedings of the IEEE International Conference on Network Protocols, 2002.
36. Paul Roberts. Attack on Al Jajeera website, March 2003. www.infoworld.com/article/03/03/26/HNjazeera_1.html.
37. Paul Roberts. SCO web site attacked again, August 2003. www.infoworld.com/article/03/08/26/HNscodown_1.html.
38. Stefan Savage, David Wetherall, Anna Karlin, and Tom Anderson. Practical network support for IP traceback. In Proceedings of the ACM SIGCOMM conference, 2000.
39. C. L. Schuba, I. V. Krsul, M. G. Kühn, E. H. Spafford, A. Sundaram, and D. Zamboni. Analysis of a denial of service attack on TCP. In Proceedings of IEEE Symposium on Security and Privacy, May 1997.
40. Karyl F. Stein. Spak, 2004. www.xenos.net/software/spak/.
41. Check Point Software Technologies. Syndefender. www.checkpoint.com/ products/firewall-1.
42. Farn Wang. Efficient verification of timed automata with BDD-like data-structures. In Proceedings of VMCAl'03, Verification, Model Checking, and Abstract Interpretation. Springer-Verlag (LNCS 2575).
43. H. Wang, D. Zhang, and K. Shin. Detecting SYN flooding attacks. In Proceedings of IEEE INFOCOM, 2002.
44. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Joglekar. An integrated experimental environment for distributed systems and networks. December 2002.
45. E. D. Zwicky, S. Chapman, D. B. Chapman, and D. Ru. Building Internet Firewalls. OŔeilly, Cambridge, MA, 1995.