Adaptive distributed traffic control service for DDoS attack mitigation

Proceedings - 19th IEEE International Parallel and Distributed Processing Symposium, IPDPS 2005

Volumn 2005, Issue , 2005, Pages

  Dübendorfer, Thomas ^a   Bossardt, Matthias ^a   Plattner, Bernhard ^a  

^a ETH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

DISTRIBUTED DENIAL OF SERVICE (DDOS) ATTACKS; DISTRIBUTED FIREWALL-LIKE FILTERING; INTERNET ATTACKS;

ADAPTIVE SYSTEMS; COMPUTER NETWORKS; COMPUTER SYSTEM FIREWALLS; INTERNET; PROGRAM DEBUGGING; TRAFFIC CONTROL;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33746278852     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IPDPS.2005.76     Document Type: Conference Paper

References (28)

1. Doubleclick knickt unter DDoS-Attacke ein. http://www.heise.de/newsticker/meldung/49514, 7 2004.
2. RIPE NCC Hostcount. http://www.ripe.net/info/stats/hostcount/2004/08/index.html, 8 2004.
3. Computer Industry Almanac. http://www. c-i-a.com/pr1202.htm, December 2002.
4. D. G. Andersen. Mayday: Distributed Filtering for Internet Services. In 4th USENIX Symposium on Internet Technologies and Systems (USITS 2003), Seattle, USA, March 2003.
5. M. Bossardt, R. Hoog Antink, A. Moser, and B. Plattner. Chameleon: Realizing Automatic Service Composition for Extensible Active Routers. In Proceedings of the Fifth Annual International Working Conference on Active Networks, IWAN 2003, LNCS, Kyoto, Japan, December 2004. Springer Verlag.
6. T. Dübendorfer, A. Wagner, and B. Plattner. An Economic Damage Model for Large-Scale Internet Attacks. In 13th IEEE International Workshops on Enabling Technologies (WET ICE 2004); Enterprise Security. IEEE, June 2004.
7. P. Ferguson and D. Senie. RFC 2267: Network Ingress Fil tering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing, January 1998.
8. S. Floyd, S. Bellovin, J. Ioannidis, K. Kompella, R. Mahajan, and V. Paxson. Pushback messages for controlling aggregates in the network.
9. A. D. Keromytis, V. Misra, and D. Rubenstein. SOS: Secure Overlay Services. Pittsburgh, USA, August 2002.
10. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek. The Click modular router. ACM Transactions on Computer Systems, 18(3):263-297, August 2000.
11. K. Lakshminarayanan, D. Adkins, D. Perrig, and I. Stoica. Taming IP Packet Flooding Attacks. In Proceedings of ACM Hot Topics in Networking Workshop (HotNets-II), Cambridge, USA, November 2003.
12. R. Lemos. MSBlast epidemic far larger than believed. http://news.com.com/MSBlast+epidemic+ far+larger+than+believed/2100-7349%_3-5184439.html, 2004.
13. R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling High Bandwidth Aggregates in the Network. Computer Communications Review, 32(3), July 2002.
14. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. Inside the Slammer Worm. IEEE Security and Privacy, 4(1):33-39, July 2003.
15. K. Park and H. Lee. On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets. In Proceedings of ACM Sigcomm 2001, San Diego, USA, August 2001.
16. V. Paxson. An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks. ACM Computer Communications Review (CCR), 31(3), July 2001.
17. D. P. Reed, J. H. Saltzer, and D. D. Clark. Comment on Active Networking and End-to-End Arguments. IEEE Network, 12(3), May/June 1998.
18. J. H. Saltzer, D. P. Reed, and D. D. Clark. End-to-End Arguments in System Design. ACM Transactions in Computer Systems, 2(4), November 1984.
19. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical Network Support for IP Traceback. In Proceedings of ACM Sigcomm 2000, Stockholm, Sweden, August 2000.
20. C. Shields. What do we mean by Network Denial of Service? In Proceedings of the 2002 IEEE Workshop on Information Assurance and Security, West Point, USA, June 2002.
21. A. C. Snoeren, C. Partridge, L. A. Sanchez, and C. E. Jones. Hash-Based IP Traceback. In Proceedings of ACM Sigcomm 2001. San Diego, USA, August 2001.
22. D. X. Song and A. Perrig. Advanced and Authenticated Marking Schemes for IP Traceback. In Proceedings of IEEE Infocom 2001, Anchorage, USA, April 2001.
23. I. Stoica, D. Adkins, S. Zhuang, S. Shenker, and S. Surana. Internet Indirection Infrastructure. Pittsburgh, USA, August 2002.
24. Symantec Security Response. W32.Blaster.Worm. http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html, 2003.
25. Symantec Security Response. W32.Sasser.Worm. http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html, 2004.
26. Thomas Dübendorfer, Matthias Bossardt. Distributed Internet Traffic Control System, Patent PCT/CH2004/000631 filed, Oct. 2004.
27. US-CERT. Technical Cyber Security Alert TA04-028A on W32/MyDoom, 2004.
28. A. Yaar, A. Perrig, and D. Song. Pi: A Path Identification Mechanism to Defend against DDoS Attacks. In Proceedings of IEEE Symposium on Security and Privacy, Berkeley, USA, May 2003.