Attack diagnosis: Throttling distributed denial-of-service attacks close to the attack sources

Proceedings - International Conference on Computer Communications and Networks, ICCCN

Volumn 2005, Issue , 2005, Pages 275-280

  Chen, Ruiliang ^a   Park, Jung Min ^a  

^a Virginia Polytechnic Institute and State University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DISTRIBUTED DENIAL-OF-SERVICE (DDOS); GLOBAL KEY DISTRIBUTION; PARALLEL ATTACK DIAGNOSIS (PAD);

INTERNET; NETWORK PROTOCOLS; PACKET NETWORKS; PROBLEM SOLVING; ROUTERS; TELECOMMUNICATION TRAFFIC;

TELECOMMUNICATION NETWORKS;

EID: 33748357746     PISSN: 10952055     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCCN.2005.1523866     Document Type: Conference Paper

References (17)

1. B. Al-Duwairi and T.E. Daniels, "Topology based packet marking," The 13th International Conference on Computer Communications and Networks (ICCCN), Oct. 2004, pp. 146-151.
2. R.K.C. Chang, "Defending against Flooding-based Distributed Denial-of-service Attacks: a Tutorial," IEEE Communications Magazine, Vol. 40(10), Oct. 2002, pp. 42-51.
3. P. Ferguson and D. Senie, Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing, RFC 2267, Jan. 1998.
4. C. Jin, H. Wang, and K. G. Shin, "Hop-Count Filtering: An Effective Defense against Spoofed DoS Traffic," The Tenth ACM International Conference on Computer and Communications Security (CCS), Oct. 2003, pp. 30-41.
5. J. Kurose and K. Ross, Computer Networking: a Top-down Approach Featuring the Internet, Third Edition, Addison Wesley, 2004.
6. R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker, "Controlling High Bandwidth Aggregates in the Network," Computer Communications Review, 32(3), Jul. 2002, pp. 62-73.
7. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDoS at the Source," The 10th IEEE International Conference on Network Protocols, Nov. 2002, pp. 312-321.
8. K. M. Moriarty, Distributed Denial of Service Incident Handling: Real-Time Inter-Network Defense, Internet Draft, draft-moriarty-ddos-rid06.txt, Feb. 2004.
9. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hussain, and R. Govindan, "Cossack: Coordinated Suppression of Simultaneous Attacks," DARPA Information Survivability Conference and Exposition, Vol. 1, Apr. 2003, pp. 2-13.
10. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Practical Network Support for IP Traceback," The conference on Applications, Technologies, Architectures, and Protocols for Computer Communication (SIGCOMM), Aug. 2000, pp.295-306.
11. CAIDA's Skitter project web page, Available at: http://www.caida.org/tools/measurement/skitter/index.xml.
12. R. Stone, "CenterTrack: An IP Overlay Network for Tracking DoS Floods," The 2000 USENIX Security Symposium, July 2000, pp. 199-212.
13. M. Sung, J. Xu, "IP Traceback-based Intelligent Packet Filtering: a Novel Technique for Defending against Internet DDoS Attacks," IEEE Transactions on Parallel and Distributed Systems, Vol.14(9), Sep. 2003, pp. 861-872.
14. R. Thomas, B. Mark, T. Johnson, and J. Croall, "NetBouncer: Client-legitimacy-based High-performance DDoS Filtering," In DARPA Information Survivability Conference and Exposition, Vol. 1, Apr. 2003, pp. 14-25.
15. A. Yaar, A. Perrig, and D. Song, "Pi: a Path Identification Mechanism to Defend against DDoS Attacks," The 2003 IEEE Symposium on Security and Privacy, May 2003, pp. 93-107.
16. A. Yaar, A. Perrig, and D. Song, "SIFF: a Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks," The 2004 IEEE Symposium on Security and Privacy, May 2004, pp. 130-143.
17. S. Zhang and P. Dasgupta, "Denying Denial of Service Attacks: a Router Based Solution," The 2003 International Conference on Internet Computing, Jun. 2003.