Adversarial exploits of end-systems adaptation dynamics

Journal of Parallel and Distributed Computing

Volumn 67, Issue 3, 2007, Pages 318-335

  Guirguis, Mina ^a   Bestavros, Azer ^b   Matta, Ibrahim ^b   Zhang, Yuting ^c  

^a Texas State University   (United States)

^b BOSTON UNIVERSITY   (United States)

^c ALLEGHENY COLLEGE   (United States)

Author keywords

Adaptive resource management; Denial of Service; Performance evaluation; Scalable web services; Security

Indexed keywords

COMPUTER SIMULATION; COMPUTER SYSTEMS; CONTROL EQUIPMENT; LAWS AND LEGISLATION; QUALITY OF SERVICE; RADAR; SECURITY OF DATA;

ADAPTIVE RESOURCE MANAGEMENT; DENIAL OF SERVICE; PERFORMANCE EVALUATION; SCALABLE WEB SERVICES;

INTERNET;

EID: 33846425791     PISSN: 07437315     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jpdc.2006.10.005     Document Type: Article

References (47)

1. Abdelzaher T.F., and Bhatti N. Web content adaptation to improve server overload behavior. Comput. Networks 31 11-16 (1999) 1563-1577
2. T. Abdelzaher, C. Lu, Modeling and performance control of internet servers, in: Proceedings of the 39th IEEE Conference on Decision and Control (ICDC), Sydney, Australia, 2000.
3. M. Andersson, M. Kihl, A. Robertsson, Modelling and design of admission control mechanisms for Web servers using non-linear control theory, in: Proceedings of ITCom, 2003.
4. Apache HTTP Server, 〈http://httpd.apache.org〉.
5. M. Balter, M. Crovella, C. Murta, On choosing a task assignment policy for a distributed server system, J. Parallel Distrib. Comput. 59 (2) (1999) 204-228.
6. A. Bestavros, N. Katagai, J. Londono, Admission control and scheduling for high performance World Wide Web servers, Technical Report BUCS-TR-1997-015, Boston University, Computer Science Department (August 1997).
7. J. Carlstrom, R. Rom, Application-aware admission control and scheduling in web servers, in: Proceedings of Infocom, 2002.
8. C.C. Center, CERT Advisory CA-1996-21 TCP SYN Flooding and IP Spoofing Attacks, 〈http://www.cert.org/advisories/CA-1996-21.html〉, Original issue date: September 19, 1996.
9. C.C. Center, Trends in Denial of Service Attack Technology-October 2001, 〈http://www.cert.org/archive/pdf/DoS_trends.pdf〉.
10. C.C. Center, Denial of Service Attacks, 〈http://www.cert.org/tech_tips/denial_of_service.html〉.
11. S. Chatterjee, J.K. Strosnider, A generalized admissions control strategy for heterogeneous, distributed multimedia systems, ACM Multimedia (1995) 345-356.
12. L. Cherkasova, P. Phaal, Session based admission control: a mechanism for improving the performance of an overloaded Web server, Technical Report HPL-98-119, HP Labs (June 1998).
13. L. Cherkasova, P. Phaal, Predictive admission control strategy for overloaded commercial Web server, in: Proceedings of Eighth International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS), 2000.
14. T. Chiueh, M. Vernick, An empirical study of admission control strategies in video servers, in: Proceedings of the 1998 International Conference on Parallel Processing, Minneapolis, MN, 1998, pp. 313-320.
15. Cisco, Configuring Load Balancing on the CSS 11500, 〈http://www.cisco.com/warp/public/117/methods_load_bal.pdf〉.
16. Cisco, Network Implementation, 〈http://www.cisco.com/univercd/cc/td/doc/product/iaabu/localdir/ld20rns/ldicgd/ld3_ch3.pdf〉.
17. Y. Diao, N. Gandhi, S. Parekh, J. Hellerstein, D. Tilbury, Using mimo feedback control to enforce policies for interrelated metrics with application to the apache web server, in: Proceedings of the Network Operations and Management Symposium 2002, Florence, Italy, 2002.
18. F5, BIG-IP Load Balancer Limited, 〈http://www.f5.com/f5products/products/bigip/ltm/lbl.html〉.
19. B. Fortz, M. Thorup, Internet traffic engineering by optimizing OSPF weights, in: Proceedings of IEEE INFOCOM, 2000.
20. M. Guirguis, A. Bestavros, I. Matta, Exploiting the transients of adaptation for RoQ attacks on Internet resources, in: Proceedings of the 12th IEEE International Conference on Network Protocols (ICNP), 2004.
21. M. Guirguis, A. Bestavros, I. Matta, Y. Zhang, Reduction of quality (RoQ) attacks on Internet end systems, in: Proceedings of INFOCOM, 2005.
22. M. Guirguis, A. Bestavros, I. Matta, Y. Zhang, Adversarial exploits of load balancers: vulnerability assessment and design tradeoffs, in: Proceedings of INFOCOM, May, 2005.
23. A. Hussain, J. Heidemann, C. Papadopoulos, A framework for classifying denial of service attacks, in: Proceedings of the 2003 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, ACM Press, New York, 2003, pp. 99-110.
24. IBM, DB2 connection routing using Linux load balancing, 〈http://www-128.ibm.com/developerworks/db2/library/techarticle/dm-0410wright/〉.
25. X. Jiang, P. Mohapatra, An aggressive admission control algorithms for multimedia servers, in: Proceedings of International Conference on Multimedia Computing and Systems, 1997, pp. 620-621.
26. S. Kandula, D. Katabi, M. Jacob, A. Berger, Botz-4-Sale: surviving organized DDoS attacks that mimic flash crowds, in: Proceedings of NSDI, Boston, MA, 2005.
27. Knightly E., and Shroff N. Admission control for statistical QoS: theory and practice. IEEE Network 13 2 (1999) 20-29
28. A. Kuzmanovic, E. Knightly, Low-rate TCP-targeted denial of service attacks (The Shrew vs. the Mice and Elephants), in: Proceedings of ACM SIGCOMM'03, karlsruhe, Germany, 2003.
29. S. Lim, C. Lee, C. Ahn, C. Lee, K. Park, An adaptive admission control mechanism for a cluster-based web server system, in: Proceedings of International Parallel and Distributed Processing Symposium (IPDPS), Fort Lauderdale, FL, 2002.
30. C. Meadows, A formal framework and evaluation method for network denial of service, in: Proceedings of the 12th IEEE Computer Security Foundations Workshop, 1999.
31. Microsoft, SharePoint Services, 〈http://www.microsoft.com/resources/documentation/wss/2/all/adminguide/en-us/stsf15.mspx〉.
32. Microsoft, Network Load Balancing Technical Overview, 〈http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/nlbovw.mspx〉.
33. Microsoft, SQL Server 2000 High Availability Series: Implementing Network Load Balancing, 〈http://www.microsoft.com/technet/prodtechnol/sql/2000/deploy/hasog04.mspx〉.
34. mini_httpd: small HTTP server, 〈http://www.acme.com/software/mini_httpd〉.
35. J. Mirkovic, J. Martin, P. Reiher, A taxonomy of DDoS attacks and DDoS defense mechanisms, Technical Report 020018, Computer Science Department, University of California, Los Angeles.
36. D. Mosberger, T. Jin, Httperf: a tool for measuring web server performance, in: Proceedings of the First Workshop on Internet Server Performance (WISP '98), Madison, WI, 1998.
37. Nortel, Alteon Web OS Traffic Control, 〈http://www.nortelnetworks.com/products/01/webos/index.html〉.
38. Ogata K. Modern Control Engineering. fourth ed. (2002), Prentice-Hall, Englewood Cliffs, NJ
39. R. Pradhan, M. Claypool, Adaptive content delivery for scalable Web servers, in: Proceedings of the International Network Conference (INC), Plymouth, United Kingdom, 2002.
40. A. Robertsson, B. Wittenmark, M. Kihl, Analysis and design of admission control systems in Web-server systems, in: Proceedings of American Control Conference (ACC), 2003.
41. S. Son, K. Kang, QoS Management in Web-based real-time data services, in: Proceedings of the Fourth IEEE International Workshop on Advanced Issues of E-Commerce and Web-Based Information Systems (WECWIS'02), Newport Beach, California, 2002.
42. T. Voigt, Overload behaviour and protection of event-driven Web servers, in: Proceedings of International Workshop on Web Engineering (in conjunction with Networking 2002), Pisa, Italy, 2002.
43. T. Voigt, P. Gunningberg, Handling multiple bottlenecks in Web servers using adaptive inbound controls, in: Proceedings of Protocols for High-Speed Networks, 2002, pp. 50-68.
44. X. Wang, H. Schulzrinne, Adaptive reservation: a new framework for multimedia adaptation, in: Proceedings of the IEEE International Conference on Multimedia and Expo (ICME), New York, NY, 2000.
45. M. Welsh, D. Culler, Overload management as a fundamental service design primitive, in: Proceedings of the Tenth ACM SIGOPS European Workshop, Saint-Emilion, France, 2002.
46. M. Welsh, D. Culler, Adaptive Overload Control for Busy Internet Servers, in: Proceedings of the 4th USENIX Conference on Internet Technologies and Systems (USITS), 2003.
47. M. Welsh, D.E. Culler, E.A. Brewer, SEDA: an architecture for well-conditioned, scalable Internet services, in: Symposium on Operating Systems Principles, 2001, pp. 230-243.