A middleware system for protecting against application level denial of service attacks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4290 LNCS, Issue , 2006, Pages 260-280

  Srivatsa, Mudhakar ^a   Iyengar, Arun ^b   Yin, Jian ^b   Liu, Ling ^a  

^a Georgia Institute of Technology   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; COMPUTER CRIME; ONLINE SYSTEMS; SECURITY OF DATA; TELECOMMUNICATION SERVICES; TELECOMMUNICATION TRAFFIC; BENCHMARKING; COMPUTER OPERATING SYSTEMS; HTTP; MIDDLEWARE; SEMANTICS; SOCIAL NETWORKING (ONLINE); TRANSMISSION CONTROL PROTOCOL;

CPU RESOURCES; DATABASE BANDWIDTH; DENIAL OF SERVICE (DOS) ATTACKS; WEB APPLICATIONS; APPLICATION LEVEL; APPLICATION-SPECIFIC KNOWLEDGE; BOTTLENECK RESOURCES; DENIAL OF SERVICE; MIDDLEWARE SYSTEM; SAMPLE APPLICATIONS; TRAFFIC CHARACTERISTICS; WEB APPLICATION;

MIDDLEWARE; DENIAL-OF-SERVICE ATTACK;

EID: 33845924479     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11925071_14     Document Type: Conference Paper

References (45)

1. Netfilter/IPTables project homepage. http://www.netfilter.org/.
2. Apache. Apache HTTP server, http://httpd.apache.org.
3. Apache. Apache tomcat servlet/JSP container, http://jakarta.apache.org/ tomcat.
4. D. J. Bernstein. SYN cookies, http://cr.yp.to/syncookies.html, 2005.
5. V. Cardellini, E. Casalicchio, M. Colajanni, and M. Mambelli. Enhancing a web server cluster with quality of service mechanisms. In Proceedings of 21st IEEE IPCCC, 2002.
6. CERT. Incident note IN-2004-01 W32/Novarg.A virus, 2004.
7. S. Chandra, C. S. Ellis, and A. Vahdat. Application-level differentiated multimedia web services using quality aware transcoding. In Proceedings of IEEE special issue on QoS in the Internet, 2000.
8. H. Chen and A. Iyengar. A tiered system for serving differentiated content. In Proceedings of World Wide Web: Internet and Web Information Systems Vol. 6, No. 4, December 2003.
9. L. Cherkasova and P. Phaal. Session based admission control: a mechanism for web QoS. In Proceedings of IEEE Transactions on Computers, 2002.
10. S. A. Crosby and D. S. Wallach. Denial of service via algorithmic complexity attacks. In Proceedings of 12th USENIX Security Symposium, pp: 29-44, 2003.
11. C. Dwork and M. Naor. Pricing via processing or combatting junk mail. In Proceedings of Crypto, 1992.
12. K. Egevang and P. Francis. RFC 1631: The IP network address translator (NAT). http://www.faqs.org/rfcs/rfc 1631.html, 1994.
13. R. Ferguson and D. Senie. RFC 2267: Network ingress filtering: Defeating denial of service attacks which employ ip source address spoofing. http://www.faqs.org/rfcs/rfc2267.html, 1998.
14. FireFox. Mozilla firefox web browser, http://www.mozilla.org/products/ firefox, 2005.
15. A. fox, S. D. Gribble, Y. Chawathe, E. A. Brewer, and P. gauthier. Cluster-based scalable network services. In Proceedings of 16th ACM SOSP, 1997.
16. Google. Google mail. http://mail.google.com/.
17. Google. Google maps, http://maps.google.com/.
18. Halfbakery. Stateless TCP/IP server. http://www.halfbakery.com/idea/ Stateless_20TCP_2fIP_20server.
19. IBM. IBM network dispatcher features, http://www-3.ibm.com/software/ network/about/features/keyfeatures.html.
20. IBM. DB2 universal database, http://www-306.ibm.com/software/data/db2, 2005.
21. A. Iyengar, L. Ramaswamy, and B. Schroeder. Techniques for efficiently serving and caching dynamic web content. In Book Chapter in Web Content Delivery, X. Tang, J. Xu, S. Chanson ed., Springer, 2005.
22. A. Juels and J. Brainard. Client puzzle: A cryptographic defense against connection depletion attacks. In Proceedings of NDSS, 1999.
23. J. Jung, B. Krishnamurthy, and M. rabinovich. Flash crowds and denial of service attacks: Characterization and implications for cdns and web sites. In Proceedings of 10th WWW Conference, 2002.
24. S. Kandula, D. Katabi, M. Jacob, and A. Berger. Botz-4-sale: Surviving organized DDoS attacks that mimic flash crowds. In Proceedings of 2nd USENIX NSDI, 2005.
25. S. Kent. RFC 2401: Secure architecture for the internet protocol. http://www.ietf.org/rfc/rfc2401.txt, 1998.
26. A. Keromytis, V. Misra, and D. Rubenstein. SOS: Secure overlay services. In Proceedings of the ACM SIGCOMM, 2002.
27. H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-hashing for message authentication. http://www.faqs.org/rfcs/rfc2104.html, 1997.
28. J. Leyden. East european gangs in online protection racket, www.theregister.co.uk/2003/11/12/east-european-gangs-in-online/.
29. Netscape. Javascript language specification, http://wp.netscape.com/eng/ javascript/.
30. OpenSSL. Openssl. http://www.openssl.org/.
31. PHARM. Java TPCW implementation distribution, http://www.ece.wisc.edu/ ~pharm/tpcw.shtml, 2000.
32. K. Poulsen. FBI busts alleged DDoS mafia, www.securityfocus.com/news/ 9411, 2004.
33. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proceedings of ACM SIGCOMM, 2000.
34. V. A. Siris and F. Papagalou. Application of anomaly detection algorithms for detecting SYN flooding attacks. In Proceedings of IEEE Globecom, 2004.
35. I. Stoica, S. Shenker, and H. Zhang. Core-stateless fair queuing: A scalable architecture to approximate fair bandwidth allocations in high speed networks. In Proceedings of SIGCOMM, 1998.
36. A. Stubblefield and D. Dean. Using client puzzles to protect tls. In Proceedings of 10th USENIX Security Symposium, 2001.
37. TPC. TPCW: Transactional e-commerce benchmark, http://www.tpc.org/tpcw, 2000.
38. W3Schools. Browser statistics. http://www.w3schools.com/browsers/ browsers_stats.asp.
39. X. Wang and M. K. Reiter. Defending against denial-of-service attacks with puzzle auctions. In Proceedings of IEEE Symposium on Security and Privacy, 2003.
40. X. Wang and M. K. Reiter. Mitigating bandwidth exhaustion attacks using congestion puzzles. In Proceedings of 11th ACM CCS, 2004.
41. B. Waters, A. Juels, A. Halderman, and E. W. Felten. New client puzzle outsourcing techniques for dos resistance. In Proceedings of 11th ACM CCS, 2004.
42. C. K. Wei. AJAX: Asynchronous Java + XML. http://www.developer.com/ design/article.php/3526681, 2005.
43. Wikipedia. Comparison of web browsers. http://en.wikipedia.org/wiki/ Comparison_of-web.browsers.
44. B. Yang and H. Garcia-Molina. Improving search in peer-to-peer networks. In Proceedings of 22nd IEEE ICDCS, 2002.
45. X. Yang, D. Wetherall, and T. Anderson. A DoS-limiting network architecture. In Proceedings of ACM SIGCOMM, 2005.