Defending application DDoS with constraint random request attacks

2005 Asia-Pacific Conference on Communications

Volumn 2005, Issue , 2005, Pages 620-624

  Yen, Wei ^a   Lee, Ming Fang ^a  

^a TATUNG UNIVERSITY   (Taiwan)

Author keywords

Application level security; DDoS; Request queue

Indexed keywords

COMPUTER AIDED DESIGN; CONSTRAINT THEORY; RANDOM PROCESSES; SEARCH ENGINES; SECURITY SYSTEMS; WORD PROCESSING;

APPLICATION LEVEL SECURITY; DETECTION MECHANISMS; REQUEST QUEUES;

COMPUTER CRIME;

EID: 33845328457     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/APCC.2005.1554136     Document Type: Conference Paper

References (17)

1. Rocky K. C. Chang, "Defending against Flooding-Based Distributed Denial-of-Service Attacks: A Tutorial," IEEE Communications Magazine, pp. 42-51, Oct. 2002.
2. A. Hussain, J. Heidemann, and C. Papadopoulos, "A Framework for Classifying Denial of Service Attacks," in the Proc. Of Sigcomm '03, Karlsruhe, Germany, Aug, 2003, pp. 99-110.
3. N. Daswani and H. Garcia-Molina, "Query-Flood DoS Attacks in Gnutella," in the Proc. of CCS '02, Washington, U.S.A., Nov. 2002, pp. 181-192.
4. CERT Coordination Center, "CERT Advisory CA-1996-21 TCP SYN Flooding and IP Spoofing Attacks," Sep. 1996, http://www.cert.org/advisories/CA- 1996-21.html.
5. CERT Coordination Center, "CERT Advisory CA-1998-01 Smurf IP Denial-of-Service Attacks," Jan. 1998, http://www.cert.org/advisories/CA- 1998-01.html.
6. C. A. Huegen, "The Latest in Denial of Service Attacks: "Smurfing" Description and Information to Minimize Effects," Feb, 2000, chuegen@pentics.com, http://www.pantics.net/denial-of-service/white- papers/smurf.txt.
7. CERT Coordination Center, "CERT Advisory CA-1996-01 UDP Port Denial-of-Service Attack," Feb. 1996, http://www.cert.org/advisories/CA- 1996-01.html.
8. "The Economic Impacts of Unacceptable Web-Site Download Speeds," white paper, Zona Research Inc., Apr. 1999. http://www.keynote. com/resources/resource_library.html
9. "Cisco Systems Inc. Information for VU#539363: State-Based Firewalls Fail to Effectively Manage Session Table Resource Exhaustion," Jun. 2002, http:/www.kb.cert.org/vuls/id/JPLA-5AVPM5.
10. P. Ferguson and D. Senie, "Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing," May 2000, RFC 2827.
11. K. Park and H. Lee, "On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets," in the Proc. of Sigcomm '01, San Diego, California, USA Aug. 27-31, 2001, pp. 15-26.
12. J. Xu and W. Lee, "Sustaining Availability of Web Services under Distributed Denial of Service Attacks," IEEE Transactions on Computers, Vol. 52, No. 2, pp. 195-208, Feb. 2003.
13. X. Geng and A. B. Whinston, "Defeating Distributed Denial of Service Attacks," IEEE IT Pro, pp. 36-41, Jul./Aug. 2000.
14. M.-Y. Luo, C.-S. Yang, and C.-W. Tseng, "Content Management on Server Farm with Layer-7 Routing," in the Proc. of SAC 2002, Madrid, Spain, pp. 1134-1139, Mar. 2002.
15. L. Zhou and J. Hass, "Securing Ad Hoc Networks," IEEE Network, pp. 24-30, Nov./Dec. 1999.
16. A. C. Snoeren, et al., "Single-Packet IP Traceback," IEEE/ACM Transactions on Networking, Vol. 10, No. 6, pp. 721-734, Dec. 2002.
17. W. Yen, "On Application-Level DDoS Attacks and Contermeasures," in the Proc. of 2004 Symposium on Digital Life and Internet Technologies, Tainan, Taiwan, Jun. 2004.