Cooperative defence against DDoS attacks

Journal of Research and Practice in Information Technology

Volumn 38, Issue 1, 2006, Pages 69-83

  Zhang, Guangsen ^a,b   Parashar, Manish ^a,c,d,e,f,g  

^a RUTGERS UNIVERSITY   (United States)

^b RUTGERS UNIVERSITY   (United States)

^c RUTGERS UNIVERSITY   (United States)

^d IEEE   (United States)

^e Technical Committee on Parallel Processing (TCPP)   (United States)

^f Distinguished Visitor Program   (United States)

^g ACM   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COOPERATIVE DEFENSE; DISSEMINATION; DISTRIBUTED DENIAL OF SERVICE (DDOS); INTRUSION DETECTION SYSTEMS (IDS);

COMMUNICATION SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; INFORMATION TECHNOLOGY; INTERNET; NETWORK PROTOCOLS; SECURITY OF DATA;

SECURITY SYSTEMS;

EID: 33644696610     PISSN: 1443458X     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (22)

1. AKELLA, A., BHARAMBE, A., REITER, M. and SESHAN, S. (2003): Detecting DDoS attacks on ISP networks, in ACM SIGMOD Workshop on Management and Processing of Data Streams, San Diego, CA, 20-23.
2. CHANG, R. K. C. (2002): Defending against flooding-based, distributed denial-of-service attacks: A tutorial, IEEE Communications Magazine 40(10): 42-51.
3. DITTRICH, D. (2004): Distributed denial of service (DDoS) attacks/tools, http://staff.washington.edu/dittrich/misc/ddos/
4. ESTAN, C. and VARGHESE, G. (2002): New directions in traffic measurement and accounting, in Proceedings of SIGCOMM 2002, Pittsburgh, PA, USA, 270-313.
5. EUGSTER, P., GUERRAOUI, R., KERMARREC, A. and MASSOULIE, L. (2004): Epidemic information dissemination in distributed systems, IEEE Computer 37(50): 60-67.
6. GIL, T. M. and POLETO, M. (2001): Multops: a data-structure for bandwidth attack detection, in Proceedings of 10th Usenix Security Symposium, Washington, D.C., USA, 23-28.
7. GUPTA, I., BIRMAN, K. P. and VAN RENESSE, R. (2002): Fighting fire with fire: using randomized gossip to combat stochastic scalability limits, Special Issue Journal Quality and Reliability Engineering International:Secure, Reliable Computer and Network Systems 18(3): 165-184.
8. HUANG, Q., KOBAYASHI, H. and LIU, B. (2003): Analysis of a new form of distributed denial of service attack, in Proceedings of CISS03, the 37th Annual Conference on Information Science and Systems, Johns Hopkins University, Baltimore, Maryland.
9. IOANNIDIS, J. and BELLOVIN, S. M. (2002): Implementing pushback: Router-based defence against DDoS attacks, in Proceedings of Network and Distributed System Security Symposium, NDSS '02, Reston, VA, USA, 100-108.
10. KARP, R. M., SCHINDELHAUER, C., SHENKER, S. and VOCKING, B. (2000): Randomized rumor spreading, in IEEE Symposium on Foundations of Computer Science, 565-574.
11. KEMPE, D., DOBRA, A. and GEHRKE, J. (2003): Computing aggregate information using gossip, in Proceedings of the 44th Annual IEEE Symposium on Foundations of Computer Science, Cambridge, MA.
12. KEROMYTIS, A., MISRA, V. and RUBENSTEIN, D. (2002): Using overlays to improve network security, in Proceedings of the ITCom Conference, special track on Scalability and Traffic Control in IP Networks, Boston, MA, 245-254.
13. LIN, M. and MARZULLO, K. (1999): Directional gossip: gossip in a wide area network, in Proceedings of Dependable Computing - Third European Dependable Computing Conference, Berlin, Germany, 364-379.
14. MIRKOVIC, J., PRIER, G. and REIHE, P. (2003): Alliance formation for DDoS defence, in Proceedings of the New Security Paradigms Workshop, ACM SIGSAC, Ascona, Switzerland, 11-18.
15. MIRKOVIC, J., PRIER, G. and REIHER, P. (2002): Attacking DDoS at the source, in Proceedings of ICNP 2002, Paris, France, 312-321.
16. PAPADOPOULOS, C., LINDELL, R., MEHRINGER, J., HUSSAIN, A. and GOVINDAN, R. (2003): Cossack: Coordinated suppression of simultaneous attacks, in DARPA Information Survivability Conference and Exposition, Washington, DC, 1:2-13.
17. PARK, K. and LEE, H. (2001): On the effectiveness of route-based packet filtering for distributed DoS attack preventation in power-law internets, in Proceedings of ACM SIGCOMM, San Diego, CA, USA, 15-26.
18. PENG, T., LECKIE, C. and KOTAGIRI, R. (2003): Protection from distributed denial of service attack using history-based IP filtering, in Proceedings of IEEE International Conference on Communications, Anchorage, Alaska, USA, 1:482-486.
19. RENESSE, R., BIRMAN, K. and VOGELS, W. (2003): Astrolabe: A robust and scalable technology for distributed system monitoring, management, and data mining, ACM Transactions on Computer Systems 21(2): 164-206.
20. ROESCH, M. (2002): The snort network intrusion detection system, http://www.snort.org.
21. SONG, D. X. and PERRIG, A. (2001): Advanced and authenticated marking schemes for IP traceback, in Proceedings of IEEE Infocomm, Anchorage, Alaska, USA, 2: 878-886.
22. XUAN, D., BETTATI, R. and ZHAO, W. (2001): A gateway-based defence system for distributed dos attacks in high-speed networks, in Proceedings of 2001 IEEE Workshop on Information Assurance and Security.