HAWK: Halting Anomalies with Weighted choKing to rescue well-behaved TCP sessions from shrew DDoS attacks

Lecture Notes in Computer Science

Volumn 3619, Issue , 2005, Pages 423-432

  Kwok, Yu Kwong ^a,b   Tripathi, Rohit ^a   Chen, Yu ^a   Hwang, Kai ^a,c,d  

^a UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

^b UNIVERSITY OF HONG KONG   (Hong Kong)

^c IEEE   (United States)

^d USC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; COMPUTER SCIENCE; DISTRIBUTED COMPUTER SYSTEMS; PACKET NETWORKS; QUEUEING NETWORKS;

DISTRIBUTED COMPUTING; DISTRIBUTED DENIAL-OF-SERVICE (DDOS); PACKET FLOWS; SHREW ATTACKS;

MOBILE COMPUTING;

EID: 26444519904     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/11534310_46     Document Type: Conference Paper

References (8)

1. CERT/CC and FedCIRC, "Advisory CA-2000-01 Denial-of-Service Developments," Carnegie Mellon Software Eng. Institute, Jan. 2000.
2. A. Kuzmanovic and E. W. Knightly, "Low-Rate TCP-Targeted Denial of Service Attacks -The Shrew vs. the Mice and Elephants," Proceedings of ACM SIGCOMM 2003, Aug. 2003.
3. R. Pan, B. Prabhakar, and K. Psounis, "CHOKe: A Stateless Active Queue Management Scheme for Approximating Fair Bandwidth Allocation," INFOCOM 2000, vol. 2, pp. 942-951, Apr. 2000.
4. M. Jain and C. Dovrolis, "End-to-End Available Bandwidth: Measurement Methodology, Dynamics, and Relation with TCP Throughput," Proceedings of ACM SIGCOMM '02, Aug. 2002.
5. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites," Proceedings of 11th Word Wide Web Conference.
6. S. Floyd and V. Jacobson, "Random Early Detection Gateways for Congestion Avoidance," IEEE/ACM Transactions on Networking, vol. 1, no. 4, pp. 397-413, Aug. 1993.
7. S. M. Specht and R. B. Lee, "Distributed Denial of Service: Taxonomies of Attacks, Tools, and Countermeasures," Proceedings of the 17th Int'l Conf. Parallel and Distributed Comp. Systems, pp. 536-543, Sept. 2004.
8. DETER and EMIST Projects, "Cyber Defense Technology: Networking and Evaluation," Comm. ACM, pp. 58-61, Mar. 2004. Also from DETER Website: http://www.isi.edu/deter/docs/acmpaper.pdf