SOS: Secure overlay services

Computer Communication Review

Volumn 32, Issue 4, 2002, Pages 61-72

  Keromytis, Angelos D ^a   Misra, Vishal ^a   Rubenstein, Dan ^a  

^a Columbia University ^*  (United States)

Author keywords

Denial of Service Attacks; Network Security; Overlay Networks

Indexed keywords

DENIAL OF SERVICE ATTACKS; NETWORK SECURITY; OVERLAY NETWORKS;

COMPUTER ARCHITECTURE; PROBABILITY; RELIABILITY; TELECOMMUNICATION NETWORKS; TELECOMMUNICATION TRAFFIC;

NETWORK PROTOCOLS;

EID: 33744945767     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/964725.633032     Document Type: Conference Paper

References (26)

1. D. Andersen, H. Balakrishnan, F. Kaashoek, and R. Morris. Resilient Overlay Networks. In Proceedings of the 18th Symposium on Operating Systems Principles (SOSP), October 2001.
2. S. Blake, D. Black, M. Carlson, E. Davies, Z. Wang, and W. Weiss. An Architecture for Differentiated Services. Technical report, IETFRFC 2475, December 1998.
3. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote Trust Management System Version 2. Internet RFC 2704, September 1999.
4. M. Blaze, J. Ioannidis, and A. Keromytis. Trust Managent for IPsec. In Proceedings of Network and Distributed System Security Symposium (NDSS), pages 139-151, February 2001.
5. D. D. Clark. The Design Philosophy of the DARRA Internet Protocols. In Proceedings of ACM SIGCOMM, pages 106-114, 1988.
6. F. Dabek, M. F. Kaashoek, R. Morris, D. Karger, and I. Stoica. Wide-Area Cooperative Storage with CFS. In Proceedings of ACM SOSP, 2001.
7. D. Dean, M. Franklin, and A. Stubblefield. An Algebraic Approach to IP Traceback. In Proceedings of the Network and Dsitributed System Security Symposium (NDSS), pages 3-12, February 2001.
8. D. Farinacci, T. Li, S. Hanks, D. Meyer, and P. Traina. Generic routing encapsulation (GRE). Request for Comments 2784, Internet Engineering Task Force, Mar. 2000.
9. D. Harkins and D. Carrel. The Internet Key Exchange (IKE). Request for Comments (Proposed Standard) 2409, Internet Engineering Task Force, Nov. 1998.
10. L. Heberlein and M. Bishop. Attack Class: Address Spoofing. In Proceedings of the 19th National Information Systems Security Conference, pages 371-377, October 1996.
11. J. Ioannidis. Protocols for Mobile Networking. PhD thesis, Columbia University, New York, 1993.
12. J. Ioannidis and S. M. Bellovin. Implementing Pushback: Router-Based Defense Against DDoS Attacks. In, Proceedings of the Network and Distributed System Security Symposium (NDSS), February 2002.
13. S. Ioannidis, A. Keromytis, S. Bellovin, and J. Smith. Implementing a Distributed Firewall. In Proceedings of Computer and Communications Security (CCS), pages 190-199, November 2000.
14. D. Karger, E. Lehman, F. Leighton, R. Panigrahy, M. Levine, and D. Lewin. Consistent Hashing and Random Trees: Distributed Caching Protocols for Relievig Hot Spots on the World Wide Web. In Proceedings of ACM Symposium on Theory of Computing (STOC), pages 654-663, May 1997.
15. S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. Request for Comments (Proposed Standard) 2401, Internet Engineering Task Force, Nov. 1998.
16. A. D. Keromytis. STRONGMAN: A Scalable Solution To Trust Management In Networks. PhD thesis, University of Pennsylvania, Philadelphia, 2001.
17. L. Kleinrock. Queueing Systems, Volume I: Theory. Wiley-Interscience, 1975.
18. D. Moore, G. Voelker, and S. Savage. Inferring Internet Denial-of-Service Activity. In Proceedings of the 10th USENIX Security Symposium, pages 9-22, August 2001.
19. C. Perkins. IP encapsulation within IP. Request for Comments 2003, Internet Engineering Task Force, Oct. 1996.
20. M. G. Reed, P. F. Syverson, and D. M. Goldschlag. Anonymous connections and onion routing. IEEE Journal on Special Areas in Communications, 16(4):482-494, 1998.
21. K. W. Ross. Multiservice Loss Models for Broadband Telecommunication Networks. Springer-Verlag, 1995.
22. J. H. Saltzer, D. P. Reed, and D. D. Clark. End-to-end arguments in System Design. ACM Transactions on Computer Systems, 2(4):277-288, November 1984.
23. S. Savage, N. Cardwell, D. Wetherall, and T. Anderson. TCP Congestion Control with a Misbehaving Receiver. ACM Computer Communications Review, 29(5):71-78, October 1999.
24. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Network Support for IP Traceback. ACM/IEEE Transactions on Networking, 9(3):226-237, June 2001.
25. C. Schuba, I. Krsul, M. Kuhn, E. Spafford, A. Sundaram, and D. Zamboni. Analysis of a Denial of Service Attack on TCP. In Proceedings of IEEE Security and Privacy, pages 208-223, May 1997.
26. I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan. Chord: A Scalable Peer-To-Peer Lookup Service for Internet Applications. In Proceedings of ACM SIGCOMM, 2001.