Trade-offs in probabilistic packet marking for IP traceback

Journal of the ACM

Volumn 52, Issue 2, 2005, Pages 217-244

  Adler, Micah ^a,b  

^a UNIVERSITY OF MASSACHUSETTS   (United States)

^b Biologically Inspired Neural and Dynamical Systems Laboratory   (United States)

Author keywords

Denial of Service

Indexed keywords

NETWORK PACKETS; PACKET HEADER;

PACKET NETWORKS; PROBABILITY; PROBLEM SOLVING;

NETWORK PROTOCOLS;

EID: 27844501172     PISSN: 00045411     EISSN: 00045411     Source Type: Journal    
DOI: 10.1145/1059513.1059517     Document Type: Review

References (18)

1. AR, S., LIPTON, R., RUBINFELD, R., AND SUDAN, M. 1992. Reconstructing algebraic functions from mixed data. In Proceedings of 33rd Annual Symposium on Foundations of Computer Science. IEEE Computer Society Press, Los Alamitos, Calif. 503-512.
2. BELLOVIN, S. M. 2000. ICMP traceback messages. Internet Draft: draft-bellovin-itrace-00.txt.
3. BURCH, H., AND CHESWICK, B. 2000. Tracing anonymous packets to their approximate source. In Proceedings of the Usenix, LISA.
4. DEAN, D., FRANKLIN, M., AND STUBBLEFIELD, A. 2001. An algebraic approach to IP traceback. In Proceedings of the Network and Distributed System Security Symposium.
5. DIETRICH, S., LONG, N., AND DITTRICH, D. 2000. Analyzing distributed denial of service attack tools: The shaft case. In Proceedings of the 14th Systems Administration Conference.
6. DOEPPNER, T., KLEIN, P., AND KOYFMAN, A. 2000. Using router stamping to identify the source of IP packets. In Proceedings of the 7th ACM Conference on Computer and Communications Security. ACM, New York, 184-189.
7. DONG, Q., ADLER, M., AND HIRATA, K. 2004. Efficient schemes for probabilistic packet marking. Amherst Tech. Rep. 2004-67, University of Massachusetts.
8. FERGUSON, P., AND SENIE, D. 1998. Network ingress filetring: Defeating denial of service attacks which employ IP source address spoofing. The Internet Society RFC 2267.
9. GOODRICH, M. 2002. Efficient packet marking for large-scale IP traceback. In Proceedings of 9th ACM Conference on Computer and Communications Security. ACM, New York, 117-126.
10. LEE, S., AND SHIELDS, C. 2001. Tracing the source of network attack: A technical, legal and societal problem. In Proceedings of the 2001 IEEE Workshop on Information Assurance and Security. IEEE Computer Society Press, Los Alamitos, Calif.
11. MOTWANI, R., AND RAGHAVAN, P. 1995. Randomized Algorithms. Cambridge University Press, Cambridge, Mass.
12. PARK, K., AND LEE, H. 2001a. On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack. In Proceedings of the IEEE INFOCOM. IEEE Computer Society Press, Los Alamitos, Calif., 338-347.
13. PARK, K., AND LEE, H. 2001b. On the effectiveness of route-based packet filtering for distributed dos attack prevention in power-law internets. In Proceedings of the ACM SIGCOMM. ACM, New York.
14. RIZZO, L. 1997. Effective erasure codes for reliable computer communication protocols. ACM Comput. Commun. Rev. 27, 2 (Apr.), 24-36.
15. SAVAGE, S., WETHERALL, D., KARLIN, A., AND ANDERSON, T. 2000. Practical network support for IP traceback. In Proceedings of ACM SIGCOMM. ACM, New York, 295-306.
16. SNOEREN, A. C., PARTRIDGE, C., SANCHEZ, L. A., JONES, C. E., TCHAKOUNTIO, F., KENT, S. T., AND STRAYER, W. T. 2001. Hash-based IP traceback. In Proceedings of the ACM SIGCOMM. ACM, New York.
17. SONG, D. X., AND PERRIG, A. 2001. Advanced and authenticated marking schemes for IP traceback. In Proceedings of the IEEE INFOCOM. IEEE Computer Society Press, Los Alamitos, Calif.
18. YAAR, A., PERRIG, A., AND SONG, D. 2003. Pi: A path identification mechanism to defend against DDoS attacks. In Proceedings of the IEEE Security and Privacy Symposium. IEEE Computer Society Press, Los Alamitos, Calif.