Deployable overlay network for defense against distributed SYN flood attacks

Proceedings - International Conference on Computer Communications and Networks, ICCCN

Volumn 2005, Issue , 2005, Pages 407-412

  Ohsita, Yuichi ^a   Ata, Shingo ^b   Murata, Masayuki ^a  

^a OSAKA UNIVERSITY   (Japan)

^b Osaka Prefecture University   (Japan)

Author keywords

Distributed Denial of Service (DDoS); Overlay Network; SYN Flood; TCP Proxy

Indexed keywords

DISTRIBUTED DENIAL OF SERVICE (DDOS); OVERLAY NETWORKS; SYN FLOOD; TCP PROXY;

COMPUTER CRIME; DISTRIBUTED COMPUTER SYSTEMS; NETWORK PROTOCOLS; SERVERS; TELECOMMUNICATION TRAFFIC;

COMPUTER SYSTEM FIREWALLS;

EID: 33748357341     PISSN: 10952055     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCCN.2005.1523897     Document Type: Conference Paper

References (12)

1. "CERT advisory CA-1998-01 smurf IP Denial-of-Service attacks." available at http://www.cert.org/advisories/CA-1998-01.html, Jan. 1998.
2. "CERT advisory CA-1996-01 UDP port Denial-of-Service attack." available at http://www.cert.org/advisories/CA-1996-01.html.
3. "CERT advisory CA-1996-21 TCP SYN flooding and IP spoofing attacks." available at http://www.cert.org/advisories/CA-1996-21.html, Sept. 1996.
4. D. Moore, G. M. Voelker, and S. Savage, "Inferring internet Denial-of-Service activity," in Proceedings of the 2001 USENIX Security Symposium, pp. 9-22, Aug. 2001.
5. J. Lemon, "Resisting SYN flooding DoS attacks with a SYN cache," in Proceedings of USENIX BSDCon'2002, pp. 89-98, Feb. 2002.
6. A. Zuquete, "Improving the functionality of SYN cookies," in Proceedings of 6th IFIP Communications and Multimedia Security Conference, pp. 57-77, Sept. 2002.
7. J. Mirkovic, D-WARD: DDoS network attack recognition and defence. PhD thesis, Computer Science Department, University of California, Los Angels, June 2003.
8. S. Floyd, S. M. Bellovin, J. Ioannidis, K. Kompella, R. Manajan, and V. Paxson, "Pushback messages for controlling aggregates in the network. " draft-floyd-pushback-messages-00.txt, internet-draft, work in progress, July 2001.
9. J. Mirkovic, M. Robinson, P. Reiher, and G. Kuenning, "Alliance formation for DDoS defense," in Proceedings of the New Security Paradigms Workshop, ACM SIGSAC, pp. 11-18, Aug. 2003.
10. Y. Kim, W. C. Lau, M. C. Chuah, and H. Chao, "PacketScore: Statistics-based overload control against distributed denial-of-service attacks," in Proceedings of IEEE INFOCOM 2004, Mar. 2004.
11. Y. Ohsita, S. Ata, and M. Murata, "Detecting distributed Denial-of-Service attacks by analyzing TCP SYN packets statistically," in Proceedings of IEEE Globecom 2004, vol. 4, pp. 2043-2049, Nov. 2004.
12. I. Maki, G. hasegawa, M. Murata, and T. Murase, "Throughput analysis of TCP proxy mechanism," in Proceedings of ATNAC 2004, Dec. 2004.