DDoS-resilient scheduling to counter application layer attacks under imperfect detection

Proceedings - IEEE INFOCOM

Volumn , Issue , 2006, Pages

  Ranjan, Supranamaya ^a   Swaminathan, Ram ^b   Uysal, Mustafa ^b   Knightly, Edward ^c  

^a Narus Inc   (United States)

^b HEWLETT PACKARD LABORATORIES   (United States)

^c RICE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION-LAYER RESOURCE; DISTRIBUTED DENIAL OF SERVICE (DDOS); IMPERFECT DETECTION;

RESOURCE ALLOCATION; SCHEDULING; SERVERS;

NETWORK SECURITY;

EID: 33845591142     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2006.127     Document Type: Conference Paper

References (27)

1. TPC-W: Transaction Processing Council. http://www.tpc.org.
2. C. Amza, A. Cox, and W. Zwaenepoel. Conflict-aware scheduling for dynamic content applications. In Proceedings of the 4th USENIX Symposium on Internet Technologies and Systems (USITS'03), Seattle,WA, March 2003.
3. Service provider infrastructure security: detecting, tracing, and mitigating network-wide anomalies. http://www.arbornetworks.com, 2005.
4. K. Argyraki and D.R. Cheriton. Active internet traffic filtering: Real-time response to denial-of-service attacks. In Proc. of USENIX Annual Technical Conference, April 2005.
5. M. Aran, D. Sanders, P. Druschel, and W. Zwaenepoel. Scalable content-aware request distribution in cluster-based network servers. In Proceedings of the USENIX 2000 Annual Technical Conference, June 2000.
6. N. Bhatti, A. Bouch, and A. Kuchinsky. Integrating user-perceived quality into web server design. In Proceedings of the 9th International World Wide Web Conference, Amsterdam, Netherlands, May 2000.
7. T. Calinski and J. Harabasz. A dendrite method for cluster analysis. Communications in Statistics, 3:1-27, 1974.
8. http://www.cert.org, 2005.
9. President's Information Technology Advisory Committee. Cyber security: A crisis of prioritization. www.hpcc.gov/pitac/reports/20050301_cybersecurity/ cybersecurity.pdf.
10. Cover and Thomas. "Elements of Information Theory". Wiley, 1991.
11. California Central District. United states vs jay echouafni et al. (operation cyberslam). www.usdoj.gov/criminal/fraud/websnare.pdf.
12. A. Garg and A. L. N. Reddy. Mitigating denial of service attacks using qos regulation. In Proceedings of International Workshop on Quality of Service (IWQoS), 2002.
13. J. Jung, B. Krishnamurthy, and M. Rabinovich. Flash crowds and denial of service attacks: Characterization and implications for CDNs and web sites. In Proceedings of the International World Wide Web Conference, pages 252-262. IEEE, May 2002.
14. J. Jung, V. Paxson, A. W. Berger, and H. Balakrishnan. Fast portscan detection using sequential hypothesis testing. In Proceedings of IEEE Symposium on Security and Privacy, Oakland, May 2004.
15. S. Kandula, D. Katabi, M. Jacob, and A. W. Berger. Botz-4-sale: Surviving organized ddos attacks that mimic flash crowds. In Proceedings of Symposium on Networked Systems Design and Implementation (NSDI), Boston, May 2005.
16. F. Kargl, J. Maier, and M. Weber. Protecting web servers from distributed denial of service attacks. In World Wide Web, pages 514-524, 2001.
17. Y. Kim, W. C. Lau, M. C. Chuah, and H. J. Chao. Packetscore: Statistics-based overload control against distributed denial-of-service attacks. In Proceedings of Infocom, HongKong, 2004.
18. A. Lakhina, M. Crovella, and C. Diot. Mining anomalies using traffic feature distributions. In Proceedings of ACM SIGCOMM, Philadelphia, 2005.
19. Mazu profiler. http://www.mazunetworks.com, 2005.
20. G. W. Milligan and M. C. Cooper. An examination of procedures for determining the number of clusters in a data set. Pyschometrika, 50:159-179, 1985.
21. G. Mori and J. Malik. Recognizing objects in adversarial clutter: Breaking a visual captcha. IEEE Computer Vision and Pattern Recognition, 2003.
22. The Honeynet Project and Research Alliance. Know your enemy: Tracking botnets. http://www.honeynet.org.
23. S. Ranjan, R. Karrer, and E. Knightly. Wide area redirection of dynamic content in internet data centers. In Proceedings of IEEE INFOCOM, Hong Kong, 2004.
24. L. Ricciulli, P. Lincoln, and P. Kakkar. TCP SYN flooding defense. In Proceedings of CNDS, 1999.
25. Tripwire enterprise. http://www.tripwire.com, 2005.
26. A. Wald. Sequential Analysis. J. Wiley and sons, New York, 1947.
27. M. Walfish, H. Balakrishnan, D. Karger, and S. Shenker. DoS: Fighting Fire with Fire. In 4th ACM Workshop on Hot Topics in Networks (HotNets), College Park, MD, November 2005.