IP traceback: A new denial-of-service deterrent?

IEEE Security and Privacy

Volumn 1, Issue 3, 2003, Pages 24-31

  Aljifri, Hassan ^a  

^a UNIVERSITY OF MIAMI   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER ATTACKS; INTERNET CONTROL MESSAGE PROTOCOL (ICMP); INTERNET PROTOCOL (IP); NETWORK ROUTERS;

COMPUTER CRIME; COMPUTER NETWORKS; COMPUTER SOFTWARE; CONTROL SYSTEMS; DATA MINING; DATA REDUCTION; INFORMATION ANALYSIS; INTERNET; MATHEMATICAL MODELS; PROBLEM SOLVING; PROGRAM DEBUGGING; ROUTERS; SECURITY OF DATA; USER INTERFACES;

COMPUTER PRIVACY;

EID: 3042825073     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSECP.2003.1203219     Document Type: Review

References (22)

1. S.C. Lee and C. Shields, "Tracing the Source of Network Attack: A Technical, Legal and Societal Problem," Proc. 2001 IEEE Workshop on Information Assurance and Security, IEEE Press, 2001, pp. 239-246.
2. CERT Advisory CA-2000-01 Denial-of-Service Developments, CERT, 2000; www.cert.org/advisories/CA-2000-01.html.
3. K.J. Houle and G.M. Weaver, Trends in Denial of Service Attack Technology, CERT Coordination Ctr., Carnegie Mellon Univ., 2001.
4. W. Lee and K. Park, "On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets," Proc. SIGCOMM, ACM Press, 2001, pp. 15-26.
5. P. Ferguson and D. Senie, "Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing," Internet Eng. Task Force RFC 2827, May 2000; www.ietf.org/rfc/rfc2827.txt.
6. T. Baba and S. Matsuda, "Tracing Network Attacks to Their Sources," IEEE Internet Computing, vol. 6, no. 3, 2002, pp. 20-26.
7. R. Stone, "CenterTrack: An IP Overlay Network for Tracking DoS Floods," Proc. 9th Usenix Security Symp., Usenix Assoc., 2000, pp. 199-212.
8. H. Burch and B. Cheswick, "Tracing Anonymous Packets to Their Approximate Source," Proc. 14th Conf. Systems Administration, Usenix Assoc., 2000, pp. 313-322.
9. A.C. Snoeren et al., "Single-Packet IP Traceback," IEEE/ACM Trans. Networking, vol. 10, no. 6, 2002, pp. 721-734.
10. S. Bellovin, M. Leech, and T. Taylor, "ICMP Traceback Messages," Internet Draft, Internet Eng. Task Force, 2003; work in progress.
11. A. Mankin et al., "On Design and Evaluation of 'Intention-Driven' ICMP Traceback," Proc. IEEE Int'l Conf. Computer Comm. and Networks, IEEE CS Press, 2001. pp. 159-165.
12. W. Lee and K. Park, "On the Effectiveness of Probabilistic Packet Marking for IP Traceback under Denial of Service Attack," Proc. IEEE INFOCOM, IEEE CS Press, 2001, pp. 338-347.
13. M. Adler, "Tradeoffs in Probabilistic Packet Marking for IP Traceback," Proc. 34th ACM Symp. Theory of Computing, ACM Press, 2002, pp. 407-418.
14. S. Savage et al., "Network Support for IP Traceback," IEEE/ACM Trans. Networking, vol. 9, no. 3, 2001, pp. 226-237.
15. M. Waldvogel, "GOSSIB vs. IP Traceback Rumors," Proc. 18th Ann. Computer Security Applications Conf. (ACSAC 2002), 2002, pp. 5-13.
16. D. Song and A. Perrig, "Advanced and Authenticated Marking Schemes for IP Traceback," Proc. IEEE INFOCOM, IEEE CS Press, 2001, pp. 878-886.
17. D. Dean, M. Franklin, and A. Stubblefield, "An Algebraic Approach to IP Traceback," ACM Trans. Information and System Security, vol. 5, no. 2, 2002, pp. 119-137.
18. M. Goodrich, "Efficient Packet Marking for LargeScale IP Traceback," Proc. 9th ACM Conf. Computer and Communication Security, ACM Press, 2002, pp. 117-126.
19. H. Aljifri, M. Smets, and A. Pons, "IP Traceback Using Header Compression," Computers & Security, vol. 22, no. 2, 2003, pp. 136-151.
20. J. Postel, "Internet Protocol," Internet Eng. Task Force RFC 791, Sept. 1981; www.ietf.org/rfc/rfc0791.txt.
21. M. Degermark, B. Nordgren, and S. Pink, "IP Header Compression," Internet Eng. Task Force RFC 2507, Feb. 1999; www.ietf.org/rfc/rfc2507.txt.
22. Characterizing and Tracing Packet Floods Using Cisco Router, Cisco Systems, 1999; www.cisco.com/warp/public/707/22.html.