Early detection and prevention of denial-of-service attacks: A novel mechanism with propagated traced-back attack blocking

IEEE Journal on Selected Areas in Communications

Volumn 23, Issue 10, 2005, Pages 1994-2002

  Haggerty, John ^a,b,c   Shi, Qi ^a,b   Merabti, Madjid ^a,b,c  

^a IEEE   (United Kingdom)

^b LIVERPOOL JOHN MOORES UNIVERSITY   (United Kingdom)

^c Computer Security and Forensic Computing ^*  (United Kingdom)

Author keywords

Denial of service (DoS); Distributed detection; Security

Indexed keywords

DENIAL OF SERVICES (DOS); DISTRIBUTED DETECTION; SECURITY;

COMPUTER NETWORKS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

QUALITY OF SERVICE;

EID: 27644594619     PISSN: 07338716     EISSN: None     Source Type: Journal    
DOI: 10.1109/JSAC.2005.854123     Document Type: Article

References (18)

1. R. Lippmann, J. W. Haines, D. J. Fried, J. Korba, and K. Das, "The 1999 DARPA off-line intrusion detection evaluation," Comput. Netw., vol. 34, pp. 579-595, 2000.
2. D. Moore, G. M. Voelker, and S. Savage, "Inferring Internet denial-of-service activity," in Proc. 10th Usenix Security Symp., Washington, DC, 2001.
3. R. Richardson, "The eighth annual CSI/FBI computer crime and security survey 2004," Comput. Security Inst./Federal Bureau of Investigation, Tech. Rep., 2003.
4. J. Haggerty, T. Berry, Q. Shi, and M. Merabti, "DiDDeM: A system for early detection of TCP SYN flood attacks," in Proc. GLOBECOM 2004, Dallas, TX, Nov.-Dec. 29-3, 2004, pp. 2037-2042.
5. T. M. Gil and M. Poletto, "MULTOPS: A data-structure for bandwidth attack detection," in Proc. USENIX Security Symp., Washington, DC, 2001.
6. C. Douligeris and A. Mitrokotsa, "DDoS attacks and defense mechanisms: Classification and state of the art," Comput. Netw., vol. 44, pp. 643-666, 2004.
7. A. Kazmanovic and E. W. Knightly, "Low-rate TCP-targeted denial of service attacks," in Proc. Symp. Commun. Arch. Protocols, Karlesruhe, Germany, 2003, pp. 345-350.
8. C. Meadows, "A cost-based framework for analysis of denial of service in networks," J. Comput. Security, vol. 9, pp. 143-164, 2001.
9. J. C. Brustoloni, "Protecting electronic commerce from distributed denial-of-service attacks," in Proc. WWW2002, Honolulu, HI, 2001, pp. 553-561.
10. P. Papadimitratos and Z. J. Haas, "Securing the Internet routing infra-structure," IEEE Commun. Mag., vol. 40, pp. 76-82, Oct. 2002.
11. S. Shyne, A. Hovak, and J. Riolo, "Using active networking to thwart distributed denial of service attacks," in Proc. IEEE Aerosp. Conf., Big Sky, MT, 2001, pp. 3/1103-3/1108.
12. D. Sterne, K. Djahandari, R. Balupari, W. La Cholter, B. Babson, B. Wilson, P. Narasimhan, and A. Purtell, "Active network based DDoS defense," in Proc. DARPA Active Netw. Conf. Expo., San Francisco, CA, 2002, pp. 193-203.
13. J. Ioannidis and S. M. Bellovin, "Implementing pushback: Router-based defense against DDoS attacks," in Proc. Netw. Distrib. Syst. Security Symp., San Diego, CA, 2002.
14. A. Hussain, J. Heodemann, and C. Papadopoulos, "A framework for classifying denial of service attacks," in Proc. Symp. Commun. Arch. Protocols, Karlesruhe, Germany, 2003, pp. 99-110.
15. J. Haggerty, Q. Shi, and M. Merabti, "Statistical signatures for early detection of flooding denial-of-service attacks," in Proc. IFIP/SEC, Chiba, Japan, May-Jun. 30-1, 2005, pp. 327-342.
16. C. Krugel and T. Toth, "Distributed pattern detection for intrusion detection," in Proc. Netw. Distrib. Syst. Security Symp., San Diego, CA, 2002.
17. Y. Zhang and V. Paxson, "Detecting backdoors," in Proc. USENIX Security Symp., Denver, CO, 2000.
18. S. McCanne and S. Floyd. (1998) NS (Network Simulator). [Online]. Available: http://www-nrg.ee.lbl.gov/ns/