Mitigating network denial-of-service through diversity-based traffic management

Lecture Notes in Computer Science

Volumn 3531, Issue , 2005, Pages 104-121

  Matrawy, Ashraf ^a   Van Oorschot, Paul C ^a   Somayaji, Anil ^a  

^a CARLETON UNIVERSITY   (Canada)

Author keywords

Diversity; Flash worms; Network denial of service; Network security; Traffic shaping

Indexed keywords

BANDWIDTH; COMPUTER WORMS; CONGESTION CONTROL (COMMUNICATION); TELECOMMUNICATION TRAFFIC;

DIVERSITY; FLASH WORMS; NETWORK DENIAL OF SERVICE; TRAFFIC SHAPING;

COMPUTER NETWORKS;

EID: 26444534457     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/11496137_8     Document Type: Conference Paper

References (27)

1. Staniford, S., Moore, D., Paxson, V., Weaver, N.: The Top Speed of Flash Worms. In: Proceedings of ACM Workshop on Rapid Malcode (WORM). (2004)
2. Floyd, S., K.Fall: Promoting the Use of End-to-End Congestion Control in the Internet. IEEE/ACM Transactions on Networking 7 (1999) 458-472
3. Widmer, J., Denda, R., Mauve, M.: A Survey of TCP-Friendly Congestion Control. IEEE Network (2001)
4. Matrawy, A., Lambadaris, I.: A Survey of Congestion Control Schemes for Multicast Video Applications. IEEE Communications Surveys and Tutorials 5 (2003) 22-31
5. Floyd, S.: TCP and Explicit Congestion Notification. ACM Computer Communications Review (1994) 10-23
6. Floyd, S., Jacobson, V.: Random Early Detection Gateways for Congestion Avoidance. IEEE/ACM Trans. on Networking (1993) 397-413
7. Estan, C., Varghese, G.: New Directions in Traffic Measurement and Accounting: Focusing on Elephants, Ignoring the Mice. ACM Trans. on Computer Systems 21 (2003) 270-313
8. Estan, C., Savage, S., Varghese, G.: Automatically Inferring Patterns of Resource Consumption in Network Traffic. In: Proceedings of ACM SIGCOMM'03, Germany (2003) 270-313
9. Clark, D., Fangand, W.: Explicit Allocation of Best Effort Packet Delivery Service. IEEE/ACM Trans. on Networking 6 (1988) 362-373
10. Blake, S., Black, D., Carlson, M., Davies, E., Wang, Z., Weiss, W.: An Architecture for Differentiated Services. RFC 2475 (1988)
11. Georgiadis, L., Guérin, R., Peris, V., Sivarajan, K.N.: Efficient Network QoS Provisioning Based on Per-Node Traffic Shaping. IEEE/ACM Transactions on Networking 4 (1996) 482-501
12. Elwalid, A., Mitra, D.: Traffic Shaping at a Network Node: Theory, Optimum Design, Admission Control. In: Proceedings of IEEE InfoCom'97. (1997)
13. Mahajan, R., Bellovin, S., Floyd, S., Ioannidis, J., Paxson, V., Shenker, S.: Controlling High Bandwidth Aggregates in the Network. Computer Communications Review (2002)
14. Ioannidis, J., Bellovin, S.: Implementing Pushback: Router-based Defense against DDoS Attacks. In: Proceedings of NDSS'02. (2001)
15. Yaar, A., Perrig, A., Song, D.X.: SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks. In: IEEE Symposium on Security and Privacy. (2004)
16. Heberlein, L., Dias, G., Levitt, K., Mukherjee, B., Wood, J., Wolber, D.: A Network Security Monitor. In: Proceedings of the IEEE Symposium on Security and Privacy. (1990)
17. Hofmeyr, S.: An Immunological Model of Distributed Detection and its Application to Computer Security. PhD thesis, University of New Mexico (1999)
18. Singh, S., Estan, C., Varghese, G., Savage, S.: The EarlyBird System for Real-time Detection of Unknown Worms. Technical report - cs2003-0761, UCSD (2003)
19. Singh, S., Estan, C., Varghese, G., Savage, S.: Automated Worm Fingerprinting. In: Proceedings of OSDI '04, San Francisco CA (2004)
20. Rabin, M.: Fingerprinting by Random Polynomials. Technical report 15-81, Harvard University (1981)
21. Kreibich, C., Crowcroft, J.: Honeycomb - Creating Intrusion Detection Signatures Using Honeypots. In: Proceedings of HOTNETS-II. (2003)
22. Kim, H., Karp, B.: Autograph: Toward Automated, Distributed Worm Signature Detection. In: Proceedings of the 13th Usenix Security Symposium. (2004)
23. Wang, K., Stolfo, S.J.: Anomalous Payload-based Network Intrusion Detection. In: Proceedings of RAID'04. (2004)
24. Mahalanobis, P.: On the generalized distance in statistics. Proc. Natl. Institute of Science of India 2 (1936)
25. Staniford, S., Paxson, V., Weaver, N.: How to Own the Internet in Your Spare Time. In: Proceedings of the 11th USENIX Security Symposium. (2002)
26. Matrawy, A., Somayaji, A., van Oorschot, P.: The Threat of Attacker Innovation to Flash Worm Defenses. Manuscript in Preparation (2005)
27. Moore, D., Paxson, V., Savage, S., Shannon, C., Staniford, S., Weaver, N.: The Spread of the Sapphire/Slammer Worm. Technical report, CAIDA et al. (2003) http://www.caida.org/analysis/security/sapphire/.