Proactive control of distributed denial of service attacks with source router preferential dropping

3rd ACS/IEEE International Conference on Computer Systems and Applications, 2005

Volumn 2005, Issue , 2005, Pages 357-364

  Fan, Yinghong ^a   Hassanein, Hossam ^a   Martin, Patrick ^a  

^a QUEEN S UNIVERSITY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION SERVICES; ONLINE SYSTEMS; ROUTERS; TELECOMMUNICATION TRAFFIC; USER INTERFACES;

DISTRIBUTED DENIAL OF SERVICE (DDOS); NETWORK RESOURCES; ONLINE SERVICE; SERVICE ATTACKS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33746544213     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AICCSA.2005.1387064     Document Type: Conference Paper

References (24)

1. CERT Coordination Center, "Denial of Service Attacks," http://www.cert.org/tech_tips/denial_of_service.htm
2. CERT Coordination Center, "Trends in Denial of Service Attack Technology," October 2001.
3. David Dittrich, "The DoS Project's "trinoo" distributed denial of service attack tool," Technical Report, University of Washington, October 1999. http://staff.washington.edu/dittrich/misc/trinoo.analysis
4. David Dittrich, "The "Tribe Flood Network" distributed denial of service attack tool," Technical Report, University of Washington, October 1999. http://staff.washington.edu/dittrich/misc/stacheldraht.analysis
5. David Dittrich, "The "stacheldraht" distributed denial of service attack tool," Technical Report, University of Washington, December 1999. http://staff.washington.edu/dittrich/misc/stacheldraht.analysis
6. CERT Coordination Center, "TCP SYN flooding and IP spoofing attacks," http://www.cert.org/advisories/CA-1996-21.html
7. CERT Coordination Center, "Smurf IP Denial-of-Service Attacks," http://www.cert.org/advisories/CA-1998-01.html
8. CERT Coordination Center, "Denial of Service Attacks using Name servers," http://www.cert.org/incident_notes/IN-2000-04.html
9. P. Ferguson and D. Senie, "Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing," RFC 2267, January 1998.
10. Cisco Web Page, "Strategies to Protect Against Distributed Denial of Service (DDoS) Attacks," February 2000. http://www.cisco.com/warp/public/ 707/newsflash.html
11. C. Schuba, I. Krsul, M. Kuhn, E. Spafford, A. Sundaram and D. Zamboni, "Analysis of a Denial of Service Attack on TCP," In Proceedings of the 1997 IEEE Symposium on Security and Privacy, pp208 - 223, May 1997.
12. J. Lemon, "Resisting SYN Flooding DoS Attacks with a SYN Cache," In Proceedings of USENIX BSDCon '2002, February 2002.
13. D. J. Bernstein and Eric Schenk, "Linux Kernel SYN Cookies Firewall Project," http://www.bronzesoft.org/projects/scfw
14. Check Point Software Technologies Ltd. "TCP SYN Flooding Attack and the FireWall-1 SYNDefender, October 1996.
15. Netscreen 100 Firewall Appliance, http://www.netscreen.com/
16. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Practical network support for IP Traceback," In Proceedings of ACM SIGCOMM Conference, August 2000.
17. S. M. Bellovin, "ICMP traceback messages," Internet draft: draft-bellovin-itrace-00.txt, March 2000.
18. D. X. Song and A. Perrig, "Advanced and authenticated marking scheme for IP Traceback," In Proceedings of IEEE INFOCOM, 2001.
19. D. Dean, M. Franklin and A. Stubblefield, "An algebraic approach to IP Traceback," In Proceedings of the 2001 Network and Distributed System Security Symposium, February 2001.
20. A.C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, W. T. Strayer, "Hash-Based IP Traceback," In Proceedings of ACM SIGCOMM 2001 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, August 2001.
21. R. Stone, "CenterTrack: An IP Overlay Network for Tracking DoS Floods," In Proceedings of 9th USENIX Security Symposium, August 2000.
22. T. M. Gil and M. Poleto, "MULTOPS: a data-structure for bandwidth attack detection," In Proceedings of 10th USENIX Security Symposium, August 2001.
23. S. Floyd, S. Bellovin, J. Ioannidis, K. Kompella, R. Mahajan and V. Paxson, "Pushback Messages for Controlling aggregates in the Network," Internet draft: draft-floyd-pushback-messages-00.txt, July 2001.
24. David K. Y. Yau, John C.S. Lui, and Feng Liang, "Defending Against Distributed Denial-of-Service Attacks with Max-Min Fair Server-centric Router Throttles," In Proceedings of IEEE International Workshop on Quality of Service, pp. 35-42, 2002.