On the effectiveness of secure overlay forwarding systems under intelligent distributed DoS attacks

IEEE Transactions on Parallel and Distributed Systems

Volumn 17, Issue 7, 2006, Pages 619-632

  Wang, Xun ^a   Chellappan, Sriram ^a   Boyer, Phillip ^a   Xuan, Dong ^a  

^a Ohio State University   (United States)

Author keywords

DDoS attacks; Secure overlay forwarding system

Indexed keywords

CLIENT SERVER COMPUTER SYSTEMS; COMPUTER CRIME; COMPUTER SIMULATION; INTELLIGENT NETWORKS; INTERNET; MATHEMATICAL MODELS;

CRITICAL SERVER; DISTRIBUTED DENIAL OF SERVICE ATTACKS; SECURE OVERLAY FORWARDING SYSTEM;

SECURITY OF DATA;

EID: 33745686749     PISSN: 10459219     EISSN: None     Source Type: Journal    
DOI: 10.1109/TPDS.2006.93     Document Type: Article

References (16)

1. J. Mirkovic and P. Reiher, "A Taxonomy of DDoS Attacks and Defense Mechanisms," ACM SIGCOMM Computer Comm. Rev., vol. 34, no. 2, pp. 39-54, Apr. 2004.
2. S. Savage, D. Wetherall, A.R. Karlin, and T. Anderson, "Practical Network Support for IP Traceback," Proc. ACM SIGCOMM Conf., Aug. 2000.
3. R. Mahajan, S. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker, "Controlling High Bandwidth Aggregates in the Network," Proc. ACM SIGCOMM Computer Comm. Rev. (CCR), July 2002.
4. K. Park and H. Lee, "On the Eeffectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets," Proc. ACM SIGCOMM Conf., Aug. 2001.
5. A. Kuzmanovic and E.W. Knightly, "Low-Rate TCP-Targeted Denial of Service Attacks (the Shrew vs. the Mice and Elephants)," Proc. ACM SIGCOMM Conf., Aug. 2003.
6. A. Keromytis, V. Misra, and D. Rubenstein, "SOS: Secure Overlay Services," Proc. ACM SIGCOMM, Aug. 2002.
7. D. Andersen, "Mayday: Distributed Filtering for Internet Services," Proc. USENIX Symp. Internet Technologies and Systems, Mar. 2003.
8. I. Stoica, D. Adkins, S. Zhuang, S. Shenker, and S. Surana, "Internet Indirection Infrastructure," Proc. ACM SIGCOMM Conf., Aug. 2002.
9. X. Wang, S. Chellappan, P. Boyer, and D. Xuan, "Analyzing Secure Overlay Forwarding Systems Under Intelligent DDoS Attacks," Technical Report OSU-CISRC-12/04-TR71, Dept. of Computer Science and Eng., The Ohio State Univ., June 2004.
10. R. Stone, "Centertrack: An IP Overlay Network for Tracking DoS Floods," Proc. Ninth USENIX Security Symp., Aug. 2000.
11. D. Andersen, H. Balakrishnan, M. Kaashoek, and R. Morris, "Resilient Overlay Networks," Proc. 18th ACM Symp. Operating Systems Principles (SOSP), Oct. 2001.
12. S. Chen and R. Chow, "A New Perspective in Defending against DDoS," Proc. 10th IEEE Workshop Future Trends of Distributed Computing Systems (FTDCS), May 2004.
13. G. Badishi, I. Keidar, and A. Sasson, "Exposing and Eliminating Vulnerabilities to Denial of Service Attacks in Secure Gossip-Based Multicast," Proc. Int'l Conf. Dependable Systems and Networks (DSN), June 2004.
14. J. Wang, L. Lu, and A.A. Chien, "Tolerating Denial-of-Service Attacks Using Overlay Networks - Impact of Overlay Network Topology," Proc. ACM Workshop Survivable and Self-Regenerative Systems, Oct. 2003.
15. M. Reiter and A. Rubin, "Crowds: Anonymity for Web Transactions," ACM Trans. Information and System Security, vol. 1, no. 1, pp. 66-92, Nov. 1998.
16. L. Xiao, Z. Xu, and X. Zhang, "Mutual Anonymity Protocols For Hybrid Peer-To-Peer Systems," Proc. IEEE Int'l Conf. Distributed Computing Systems, May 2003.