Guaranteeing access in spite of distributed service-flooding attacks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3364 LNCS, Issue , 2005, Pages 80-96

  Gligor, Virgil D ^a,b  

^a VDG Inc   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK-LINE RATE;

COMPUTER HARDWARE; COMPUTER OPERATING SYSTEMS; NETWORKS (CIRCUITS); SECURITY OF DATA; SERVERS;

ARTIFICIAL INTELLIGENCE;

EID: 33645692419     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11542322_12     Document Type: Conference Paper

References (28)

1. L. von Ahn, M. Blum, N. Hopper, and J. Langford, "CAPTCHA: Using Hard AI Problems for Security," Advances in Cryptography - EUROCRYPT 2003, Warsaw, Poland, May 2003.
2. T. Aura, P. Nikander, and J. Leiwo, "DOS-Resistant Authentication with Client Puzzles," Proc. of the 8th Int'l Security Protocols Workshop, Cambridge, U.K., April 2000, LNCS vol. 2133, Springer Verlag, pp. 170-178.
3. D. Bertsekas and R. Gallager, Data Networks, second edition, Prentice Hall, 1992.
4. D.W. Bromley, Making the Commons Work: Theory, Practice and Policy, ICS Press, San Francisco, 1992 (Part 2, describing case studies; cf. [17], p.22, 272).
5. T. Darmohray and R. Oliver, "Hot Spares for DoS Attacks," ;login:, Vol. 25, No. 7, July 2000.
6. D. Dean and A. Stubblefield, "Using Client Puzzles to Protect TLS," Proc. of the USENIX Security Symposium, August 2001.
7. C. Dwork and M. Naor, "Pricing via Processing or Combatting Junk Mail," Proc. of Advances in Cryptography: CRYPTO '92, LNCS Vol. 740, Springer Verlag, 1992.
8. V.D. Gligor, "A Note on the Denial-of-Service Problem," Proc. of the IEEE Symposium on Computer Security and Privacy, Oakland, California, April 1983.
9. (also in IEEE Transactions on Software Engineering, SE-10, No. 3, May 1984.)
10. V.D. Gligor, "On Denial of Service in Computer Networks," Proc. of Int'l Conference on Data Engineering, Los Angeles, California, February 1986, pp. 608-617.
11. V.D. Gligor and P. Donescu, "Fast Encryption and Authentication: XCBC Encryption and XECB Authentication Modes," 8th International Workshop on Fast Sofware Encryption, FSE 2001, M. Matsui (ed.), Yokohama, Japan, April 2001, pp. 92-108.
12. T. Hagerup and C. Rub, "A Guided Tour of Chernoff Bounds," Information Processing Letters, vol. 33, 1989-90, North-Holland, pp. 305-308.
13. G. Hardin, "The Tragedy of Commons," Science, vol 162, (1968): 1243.
14. J. Henessy and D. Patterson, "Computer Architecture: A Quantitative Approach," Morgan-Kaufmann, 1990, pp. 8-9.
15. J. Ioannidis and S. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks," Proc. of Network and Distributed Systems Security Symposium," San Diego, California, Feb. 2002, pp. 79-86.
16. A. Juels and J. Brainard, "Client Puzzles: A Cryptographic Defense Against Connection Depletion Attacks," in Proc. of Network and Distributed Systems Symposium, San Diego, CA, Feb. 1999.
17. B. Lampson, "Software Components: Only Giants Survive," in Computer Systems: Papers for Roger Needham, A. Herbert and K. Sparck Jones (eds.), Microsoft Research, February 2003, pp. 113-120.
18. L. Lessig, The Future of Ideas: The Fate of the Commons in a Connected World, Random House, N.Y., 2001.
19. J. K. Millen, "A Resource Allocation Model for Denial of Service," Proc. of IEEE Symposium on Security and Privacy, Oakland, CA. 1992.
20. (also in the Journal of Computer Security, vol. 2, 1993, pp. 89-106).
21. D. Moore, G. Voelker, and S. Savage, "Inferring Internet Denial of Service Activity," Proc. of 2001 USENIX Security Symposium, Washington D.C, August 2001.
22. Trusted Computing Platforms - TCPA Technology in Context, S. Pearson, B. Balacheff, L. Chen, D Palquin, G. Proudler (eds.), Prentice Hall PTR, 2003.
23. J.H. Saltzer, D.P. Reed, and D.D. Clark "End-to-End Arguments in System Design," ACM Transactions on Computer Systems, Vol.2, Nov. 1984.
24. L. Wang, V. Pai, and L. Petersen, "The Effectiveness of Request Redirection on CDN Robustness," Proc. of the 5th Symp. on OS Design and Implementation (OSDI), Boston, Mass. December 2002.
25. X. Wang and M. Reiter, "Defending Against Denial-of-Service Attacks with Puzzle Auctions," Proc. of IEEE Symp. on Security and Privacy, Berkeley, CA, May 2003.
26. J. Xu, R. Lipton, and I. Essa, "Hello, Are You Human," Technical Report, Georgia Institute of Technology, November 2000.
27. C.-F. Yu and V.D. Gligor, "A Formal Specification and Verification Method for Preventing Denial of Service Attacks," Proc. of the IEEE Security and Privacy Symposium, Oakland, CA., April 1988, pp. 187-2002
28. (also in IEEE Transactions on Software Engineering, vol. SE-16, June 1990, pp. 581-592).