Distributed mechanism in detecting and defending against the low-rate TCP attack

Computer Networks

Volumn 50, Issue 13, 2006, Pages 2312-2330

  Sun, Haibin ^a   Lui, John C S ^a   Yau, David K Y ^b  

^a CHINESE UNIVERSITY OF HONG KONG   (Hong Kong)

^b PURDUE UNIVERSITY   (United States)

Author keywords

Dos attack; Low rate attack; Network security

Indexed keywords

BANDWIDTH; DISTRIBUTED COMPUTER SYSTEMS; INTERNET; TELECOMMUNICATION TRAFFIC; TOPOLOGY;

DOS ATTACK; LOW-RATE ATTACK; NETWORK SECURITY;

COMPUTER CRIME;

EID: 33745661404     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2005.09.016     Document Type: Article

References (24)

1. M. Allman, V. Paxson, On estimating end-to-end network path properties, in: Proc. ACM SIGCOMM, Vancouver, Canada, September 1999.
2. A. Kuzmanovic, E. Knightly, Low-rate TCP-targeted denial of service attacks, in: Proc. ACM SIGCOMM, Karlsruhe, Germany, August 2003.
3. R. Mahajan, S. Floyd, D. Wetherall, Controlling high-bandwidth flows at the congested router, in: Proc. ICNP, Riverside, CA, November 2001.
4. Yau D.K.Y., Lui J.C.S., Liang F., and Yam Y. Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles. IEEE/ACM Trans. Networking 13 1 (2005) 29-42
5. Sakoe H., and Chiba H. Dynamic programming algorithm optimization for spoken word recognition. IEEE Trans. Acoust., Speech, Signal Proc. ASSP-26 1 (1978)
6. E. Keogh, Exact indexing of dynamic time warping, in: Proceedings of the 28th VLDB Conference, Hong Kong, China, August 2002.
7. Leland W.E., Taqqu M.S., Willinger W., and Wilson D.V. On the self-similar nature of ethernet traffic (extended version). IEEE/ACM Trans. Networking 2 1 (1994) 1-15
8. Crovella M.E., and Bestavros A. Self-similarity in world wide web traffic: evidence and possible causes. IEEE/ACM Trans. Networking 5 6 (1997) 835-846
9. J. Liu, Traffic modeling based on farima models, in: Proceedings of the 1999 IEEE Canadian Conference on Electrical and Computer Engineering, May 1999.
10. J. Ilow, Parameter estimation in farima processes with applications to network traffic modeling, in: Proceedings of the Tenth IEEE Workshop on Statistical Signal and Array Processing, August 2000.
11. Shreedhar M., and Varghese G. Efficient fair queueing using deficit round robin. IEEE/ACM Trans. Networking 4 3 (1996)
12. S. Golestani, A self clocked fair queueing scheme for broadband applications, in: Proc. IEEE INFOCOM, 1994.
13. McKenney P. Stochastic fairness queueing. Internetworking: Res. Exp. 2 (1986) 157-173
14. (2004, Jan.) Understanding and configuring mdrr/wred on the cisco 12000 series internet router. [Online]. Available: http://www.cisco.com/warp/public/63/mdrr_wred_overview.html.
15. Fall K., and Floyd S. Simulation-based comparisons of tahoe, reno, and sack tcp. ACM Comput. Commun. Rev. 5 3 (1996) 5-21
16. TCP SYN flooding and IP spoofing attacks, CERT Advisory CA- 96.21, Available from http://www.cert.org/.
17. Smurf IP denial-of-service attacks, CERT Advisory CA-1998-01, January 1998, Available from www.cert.org/advisories/CA-98.01.html.
18. S. Savage, D. Wetherall, A. Karlin, T. Anderson, Practical network support for IP traceback, in: Proc. ACM SIGCOMM, Stockholm, Sweden, August 2000.
19. D. Song, A. Perrig, Advanced and authenticated techniques for IP traceback, in: Proc. IEEE INFOCOM, Anchorage, Alaska, 2001.
20. Blackhole route server and tracking traffic on an IP network, Available from http://www.secsup.org/Tracking.
21. G. Yang, M. Gerla, M.Y. Sanadidi, Defense against low-rate TCPtargeted denial-of-service attacks, in: Proc. ISCC, Alexandria, Egypt, 2004.
22. A.C. Snoeren, C. Partridge, L.A. Sanchez, C.E. Jones, F. Tchakountio, S.T. Kent, W.T. Strayer, Hash-based ip traceback, in: ACM SIGCOMM, San Diego, August 2001.
23. D. Katabi, M. Handley, C. Rohrs, Congestion control for high bandwidth-delay product networks, in: Proc. ACM SIGCOMM, Pittsburgh, PA, August 2002.
24. A.M.I. Guirguis, M. Bestavros, Exploiting the transients of adaptation for roq attacks on internet resources, in: Proceedings of the 12th IEEE International Conference on Network Protocols, Oct 2004.