Mark-aided distributed filtering by using neural network for DDoS defense

GLOBECOM - IEEE Global Telecommunications Conference

Volumn 3, Issue , 2005, Pages 1701-1705

  Xiang, Yang ^a   Zhou, Wanlei ^a  

^a DEAKIN UNIVERSITY   (Australia)

Author keywords

DDoS; Filtering; Neural network; Packet marking; Traceback

Indexed keywords

BANDWIDTH; COMPUTER CRIME; INTERNET; NETWORK PROTOCOLS; PROBLEM SOLVING; SECURITY OF DATA;

DISTRIBUTED DENIAL OF SERVICE (DDOS); DISTRIBUTED FILTERING; PACKET MARKING; TRACEBACK;

NEURAL NETWORKS;

EID: 33846606858     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2005.1577940     Document Type: Conference Paper

References (28)

1. H. Aljifri, "IP Traceback: A New Denial-of-Service Deterrent?", IEEE Security & Privacy, Vol.1, No.3, 2003, pp.24-31.
2. W. H. Allen, G. A. Marin, "The LoSS Technique for Detecting New Denial of Service Attacks", Proc. of IEEE SoutheastCon 2004, pp.302-309.
3. S. M. Bellovin, "ICMP Traceback Messages", Internet Draft, Network Working Group, 2000.
4. A. Belenky, and N. Ansari, "IP Traceback With Deterministic Packet Marking", IEEE Communications Letters, Vol.7, No.4, 2003, pp.162-164.
5. H. Burch, and B. Cheswick, "Tracing Anonymous Packets to Their Approximate Source", Proc. of the 14th Systems Administration Conference (LISA 2000).
6. Skitter project, Cooperative Association for Internet Data Analysis (CAIDA), http://www.caida.org/tools/measurement/skitter/
7. R. C. Chen, W. Shi, and W. Zhou, "Simulation of Distributed Denial of Service Attacks", technical report, TR C4/09, School of Information Technology, Deakin University, Australia, 2004.
8. Computer Emergency Response Team, CERT, http://www.cert.org.
9. P. Ferguson, D. Senie, "RFC 2267 - Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing", Network Working Group, 1998.
10. S. Haykin, Neural Networks: A Comprehensive Foundation, 2nd Edition, Prentice Hall, 1998.
11. Y. Huang, J. M. Pullen, "Countering Denial-of-Service Attacks Using Congestion Triggered Packet Sampling and Filtering", Proc. of the Tenth International Conference on Computer Communications and Networks, 2001, pp.490-494.
12. Y.-H. Hu, H. Choi, H.-A. Choi, "Packet Filtering for Congestion Control under DoS Attacks," Proc. of the Second IEEE International Information Assurance Workshop (IWIA 2004), pp.3-18.
13. C. Jin, H. Wang, and K. G. Shin, "Hop-count Filtering: An Effective Defense Against Spoofed DDoS Traffic", Proc. of the 10th ACM Conference on Computer and Communication Security (CCS 2003), pp.30-41.
14. S. Jin, D. S. Yeung, "A Covariance Analysis Model for DDoS Attack Detection", 2004 IEEE International Conference on Communications, Vol.4, 2004, pp.1882-1886.
15. Y. Kim J.-Y. Jo, F. L. Merat, "Defeating Distributed Denial-of-Service Attack with Deterministic Bit Marking", IEEE GLOBECOM 2003, pp.1363-1367.
16. M. Li, C. Chi, W. Jia, W. Zhao, W. Zhou, J. Cao, D. Long and Q. Meng, "Decision Analysis of Statistically Detecting Distributed Denial-of-Service Flooding Attacks", International Journal of Information Technology and Decision Making, Vol.2, No.3, 2003, pp.397-405.
17. MIT 1998 DARPA Intrusion Detection Evaluation Data Set, http://www.ll.mit.edu/IST/ideval/data/198/198_data_index.html
18. M. Pollak, "Optimal detection of a change in distribution", Ann. Statist., Vol. 13, 1986, pp. 206-227.
19. S. Savage, D. Wetherall, A. Karlin and T. Anderson, "Network Support for IP Traceback", ACM/IEEE Transactions on Networking, Vol.9, No.3, 2001, pp.226-237.
20. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, B. Schwartz, S. T. Kent, and W. T. Strayer, "Single-Packet IP Traceback", IEEE/ACM Transactions on Networking, Vol. 10, No. 6, 2002, pp.721-734.
21. Scalable Simulation Framework, http://www.ssfnet.org.
22. R. Stone, "CenterTrack: An IP Overlay Network for Tracking DoS Floods", 9th Usenix Security Symposium, 2000, pp.199-212.
23. Sanitized UCLA CSD traffic traces, http://lever.cs.ucla.edu/ddos/traces/
24. H. Wang, D. Zhang, K. G. Shin, "Change-Point Monitoring for the Detection of DoS Attacks", IEEE Transactions on Dependable and Secure Computing, Vol.1, No.4, 2004, pp.193-208.
25. Y. Xiang, W. Zhou, and J. Rough, "Trace IP Packets by Flexible Deterministic Packet Marking (FDPM)", 2004 IEEE International Workshop on IP Operations & Management (IPOM 2004).
26. A. Yaar, A. Perrig, and D. Song, "Pi: A Path Identification Mechanism to Defend against DDoS Attacks", 2003 IEEE Symposium on Security and Privacy, pp93-107.
27. J. Yan, S. Early, R. Anderson, "The XenoService A Distributed Defeat for Distributed Denial of Service", Proc. of ISW 2000.
28. Z. Zhang, C. N. Manikopoulos, "Detecting Denial-of-Service Attacks through Feature Cross-Correlation", 2004 IEEE/Sarnoff Symposium on Advances in Wired and Wireless Communication, pp.67-70.