Reduction of Quality (RoQ) attacks on Internet end-systems

Proceedings - IEEE INFOCOM

Volumn 2, Issue , 2005, Pages 1362-1372

  Guirguis, Mina ^a   Bestavros, Azer ^a   Matta, Ibrahim ^a   Zhang, Yuting ^a  

^a BOSTON UNIVERSITY   (United States)

Author keywords

Adaptive Resource Management; Denial of Service; Performance Evaluation; Scalable Web Services; Security

Indexed keywords

NETWORK PROTOCOLS; PERFORMANCE; QUALITY OF SERVICE; RESOURCE ALLOCATION; SECURITY OF DATA;

ADAPTIVE RESOURCE MANAGEMENT; DENIAL OF SERVICES; PERFORMANCE EVALUATION; SCALABLE WEB SERVICES;

INTERNET;

EID: 25844458510     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (43)

1. M. Guirguis, A. Bestavros, and I. Matta, "Exploiting the Transients of Adaptation for RoQ Attacks on Internet Resources," in Proceedings of the 12th IEEE International Conference on Network Protocols (ICNP), Oct 2004.
2. M. Guirguis, A. Bestavros, and I. Matta, "Bandwidth Stealing via Link Targeted RoQ Attacks," in Proceedings of the 2nd IASTED International Conference on Communication and Computer Networks, Nov 2004.
3. CERT Coordination Center, "Trends in Denial of Service Attack Technology - October 2001," http://www.cert.org/archive/pdf/DoS.trends.pdf.
4. M. Welsh and D. Culler, "Adaptive Overload Control for Busy Internet Servers," in Proceedings of the 4th USENIX Conference on Internet Technologies and Systems (USITS), March 2003.
5. M. Welsh, D. E. Culler, and E. A. Brewer, "SEDA: An Architecture for Well-Conditioned, Scalable Internet Services," in Symposium on Operating Systems Principles, 2001, pp. 230-243.
6. A. Bestavros, N. Katagai, and J. Londono, "Admission Control and Scheduling for High Performance World Wide Web Servers," Tech. Rep. BUCS-TR-1997-015, Boston University, Computer Science Department, August 1997.
7. K. Ogata, "Modern Control Engineering, 4th Ed.," Prentice Hall, 2002.
8. L. Cherkasova. "FLEX: Load Balancing and Management Strategy for Scalable Web Hosting Service," in Proceedings of the Fifth International Symposium on Computers and Communications (ISCC), July 2000.
9. M. Aron, P. Druschel, and W. Zwaenepoel, "Cluster Reserves: A Mechanism for Resource Management in Cluster-based Network Servers," in Proceedings of Measurement and Modeling of Computer Systems, 2000.
10. A. Fox, S. Gribble, Y. Chawathe, E. Brewer, and P. Gauthier, "Extensible Cluster-Based Scalable Network Services," in Proceedings of the 16th ACM Symposium on Operating Systems Principles (SOSP-16), St. Malo, France, October 1997.
11. S. D. Gribble, M. Welsh, J. R. V. Behren, E. A. Brewer, D. E. Culler, N. Borisov, S. E. Czerwinski, R. Gummadi, J. R. Hill, A. D. Joseph, R. H. Katz, Z. M. Mao, S. Ross, and B. Y. Zhao, "The Ninja architecture for robust Internet-scale systems and services," Computer Networks, vol. 35. no. 4, pp. 473-497, 2001.
12. V. V. Panteleenko and V. W. Freeh, "Instantaneous Offloading of Transient Web Server Load," Proceedings of Sixth International Workshop on Web Caching and Content Distribution (WCW), June 2001.
13. J. Chuang, "Distributed Network Storage Service with Quality-of-Service Guarantees," in Proceedings of Internet Society INET, San Jose, CA, June 1999.
14. T. F. Abdelzaher and N. Bhatti, "Web Content Adaptation to Improve Server Overload Behavior," Computer Networks, vol. 31, no. 11-16, pp. 1563-1577, 1999.
15. Y. Lu, T. Abdelzaher, C. Lu, L. Sha, and X. Liu, "Feedback Control with Queueing-Theoretic Prediction for Relative Delay Guarantees in Web Servers," in Proceedings of Real-Time and Embedded Technology and Applications Symposium, Toronto, Canada, May 2003.
16. D. Mosberger and T. Jin, "Httperf: a tool for measuring web server performance," in Proceedings of the First workshop on Internet Server Performance (WISP), Madison, WI, June 1998.
17. "Minihttpd HTTP Server," http://www.acme.com/software/ mini_httpd.
18. "Apache HTTP Server," http://httpd.apache.org.
19. M. Welsh and D. Culler, "Overload management as a Fundamental Service Design Primitive," in Proceedings of the Tenth ACM SICOPS European Workshop, Saint-Emilion, France, September 2002.
20. Y. Diao, N. Gandhi, S. Parekh, J. Hellerstein, and D. Tilbury, "Using mimo feedback control to enforce policies for interrelated metrics with application to the apache web server," in Proceedings of the Network Operations and Management Symposium, Florence, Italy, April 2002.
21. E. Knightly and N. Shroff, "Admission Control for Statistical QoS: Theory and Practice," IEEE Network, vol. 13, no. 2, pp. 20-29, 1999.
22. S. Chatterjee and J. K. Strosnider, "A Generalized Admissions Control Strategy for Heterogeneous, Distributed Multimedia Systems," ACM Multimedia, pp. 345-356, 1995.
23. T. Chiueh and M. Vernick, "An Empirical Study of Admission Control Strategies in Video Servers," in Proceedings of the 1998 International Conference on Parallel Processing. Minneapolis, MN, August 1998.
24. S. Son and K. Kang. "QoS Management in Web-based Real-Time Data Services," in Proceedings of the Fourth IEEE International Workshop on Advanced Issues of E-Commerce and Web-Based Information Systems (WECWIS), Newport Beach, California, June 2002.
25. X. Jiang and P. Mohapatra, "An Aggressive Admission Control Algorithms for Multimedia Servers," in Proceedings of International Conference on Multimedia Computing and Systems. 1997, pp. 620-621.
26. T. Voigt, "Overload Behaviour and Protection of Event-driven Web Servers," in Proceedings of International Workshop on Web Engineering (in conjunction with Networking 2002), Pisa, Italy, May 2002.
27. L. Cherkasova and P. Phaal, "Session Based Admission Control: a Mechanism for Improving the Performance of an Overloaded Web Server," Tech. Rep. HPL-98-119, HP Labs, June 1998.
28. L. Cherkasova and P. Phaal, "Predictive Admission Control Strategy for Overloaded Commercial Web Server," in Proceedings of 8th International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS), August 2000.
29. T. Voigt and P. Gunningberg, "Handling Multiple Bottlenecks in Web Servers Using Adaptive Inbound Controls," in Proceedings of Protocols for High-Speed Networks, 2002, pp. 50-68.
30. B. Urgaonkar, P. Shenoy, and T. Roscoe, "Resource Overbooking and Application Profiling in Shared Hosting Platforms," in Proceedings of the 5th symposium on Operating Systems Design and Implementation (OSDI), Boston, MA, December 2002.
31. S. Jamin and S. J. Shenker, "Measurement-based Admission Control Algorithms for Controlled-load Service: A Structural Examination," Tech. Rep. CSE-TR-333-97, University of Michigan, April 1997.
32. Z. Tur, A. Veres, and A. Ol, "A Family of Measurement-based Admission Control Algorithms," in Proceedings of Performance of Information and Communication Systems, Lund, Sweden, May 1998.
33. M. Andersson, M. Kihl, and A. Robertsson, "Modelling and Design of Admission Control Mechanisms for Web Servers using Non-linear Control Theory," in Proceedings of ITCom, September 2003.
34. A. Robertsson, B. Wittenmark, and M. Kihl, "Analysis and Design of Admission Control Systems in Web-server Systems," in Proceedings of American Control Conference (ACC), June 2003.
35. T. Abdelzaher and C. Lu, "Modeling and Performance Control of Internet Servers," in Proceedings of the 39th IEEE Conference on Decision and Control (ICDC), Sydney, Australia, December 2000.
36. J. Carlstrom and R. Rom, "Application-aware Admission Control and Scheduling in Web Servers," in Proceedings of Infocom, 2002.
37. S. Lim, C. Lee, C. Ahn, C. Lee, and K. Park, "An Adaptive Admission Control Mechanism for a Cluster-Based Web Server System," in Proceedings of International Parallel and Distributed Processing Symposium (IPDPS), Fort Lauderdale, Florida, April 2002.
38. CERT Coordination Center, "Denial of Service Attacks," http://www.cert.org/tech_tips/denial_of_service.html.
39. CERT Coordination Center, "CERT Advisory CA-1996-21 TCP SYN Flooding and IP Spoofing Attacks," http://www.cert.org/advisories/CA-1996-21.html, Original issue date: September 19, 1996.
40. A. Hussain, J. Heidemann, and C. Papadopoulos, "A framework for classifying denial of service attacks," in Proceedings of the 2003 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications. 2003, pp. 99-110, ACM Press.
41. J. Mirkovic, J. Martin, and P. Reiher, "A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms," Tech. Rep. 020018, Computer Science Department, University of California, Los Angeles.
42. C. Meadows, "A Formal Framework and Evaluation Method for Network Denial of Service," in Proceedings of the 12th IEEE Computer Security Foundations Workshop, June 1999.
43. A. Kuzmanovic and E. Knightly, "Low-Rate TCP-Targeted Denial of Service Attacks (The Shrew vs. the Mice and Elephants)," in Proceedings ACM SIGCOMM, karlsruhe, Germany, August 2003.