A defense system against DDoS attacks by large-scale IP traceback

Proceedings - 3rd International Conference on Information Technology and Applications, ICITA 2005

Volumn II, Issue , 2005, Pages 431-436

  Xiang, Yang ^a   Zhou, Wanlei ^a  

^a DEAKIN UNIVERSITY   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

DETERMINISTIC PACKET MARKING (DPM); DISTRIBUTED DENIAL OF SERVICE (DDOS); FLEXIBLE DETERMINISTIC PACKET MARKING (FDPM); TRACEBACK PROCESS;

COMPUTER NETWORKS; NETWORK PROTOCOLS; PACKET NETWORKS; PROBABILISTIC LOGICS; SECURITY OF DATA;

LARGE SCALE SYSTEMS;

EID: 33646781314     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (24)

1. Australian Computer Emergency Response Team, "2004 Australian Computer Crime and Security Survey", 2004.
2. L. A. Gordon, M. P. Loeb, M. Lucyshyn and R. Richardson, "2004 CSI/FBI Computer Crime and Security Survey", 2004.
3. Computer Emergency Response Team, CERT, http://www.cert.org. Accessed 7 Sept 2004.
4. Y. Xiang and W. Zhou, "An Active Distributed Defense System to Protect Web Applications from DDoS Attacks", iiWAS2004, pp. 559-568.
5. H. Aljifri, "IP Traceback: A New Denial-of-Service Deterrent?", IEEE Security & Privacy, 1(3), 2003, pp.24-31.
6. A. Householder, A. Manion, L. Pesante, G.M. Weaver, and R. Thomas, "Managing the Threat of Denial-of-Service Attacks", CERT, 2001.
7. T. M. Gil, and M. Poletto, "MULTOPS: a data-structure for bandwidth attack detection", 10th Usenix Security Symposium, 2001, pp.23-38.
8. R. Mahajan, S. Floyd, and D. Wetherall, "Controlling High-Bandwidth Flows at the Congested Router", IEEE ICNP 2001, pp. 192-201.
9. Y. Xiang, W. Zhou, and M. Chowdhury, "A Survey of Active and Passive Defence Mechanisms against DDoS Attacks", Technical Report, TR C04/02, School of Information Technology, Deakin University, Australia, 2004.
10. R. Stone, "Center-Track: An IP Overlay Network for Tracking DoS Floods", 9th Usenix Security Symposium, 2000, pp.199-212.
11. H. Burch and B. Cheswick, "Tracing Anonymous Packets to Their Approximate Source", LISA 2000, pp.319-327.
12. S. M. Bellovin, "ICMP Traceback Messages", Internet Draft, Network Working Group, 2000.
13. A. Mankin, D. Massey, C.-L. Wu, S. F. Wu and L. Zhang, "On Design and Evaluation of Intention-Driven ICMP Traceback", Proc. of Computer Communications and Networks, 2001, pp.159-165.
14. N. G. Duffield and M. Grossglauser, "Trajectory sampling for direct traffic observation", ACM SIGCOMM 2000, pp.271-282.
15. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, B. Schwartz, S. T. Kent, and W. T. Strayer, "Single-Packet IP Traceback", IEEE/ACM Transactions on Networking, 10(6), 2002, pp.721-734.
16. T. Baba and S. Matsuda, "Tracing Network Attacks to Their Sources", IEEE Internet Computing, 6(3), 2002, pp.20-26.
17. S. Savage, D. Wetherall, A. Karlin and T. Anderson, "Network Support for IP Traceback", ACM/IEEE Transactions on Networking, 9(3), 2001, pp.226-237.
18. A. Belenky, and N. Ansari, "Tracing Multiple Attackers with Deterministic Packet Marking (DPM)", IEEE Pacific Rim Conference on Communications, Computers and Signal Processing, 2003, pp.49-52.
19. Y. Kim, J.-Y. Jo, F. L. Merat, "Defeating Distributed Denial-of-Service Attack with Deterministic Bit Marking," IEEE GLOBECOM, pp.1363-1367, 2003.
20. RFC1349, "Type of Service in the Internet Protocol Suite", Network Working Group, 1992.
21. RFC2474, "Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers", Network Working Group, 1998.
22. I. Stocia, and H. Zhang, "Providing Guaranteed Services Without Per Flow Management", ACM SIGCOMM 1999, pp.81-94.
23. P. Gevros, J. Crowcroft, P. Kirstein, and S. Bhatti, "Congestion Control Mechanisms and the Best Effort Service Model", IEEE Network, 15(3), 2001, pp.16-26.
24. A. Binstock, and J. Rex, "Practical Algorithms for Programmers", Pearson Education, 1995.