Emulation versus simulation: A case study of TCP-targeted denial of service attacks

2nd International Conference on Testbeds and Research Infrastructures for the Development of Networks and Communities, TRIDENTCOM 2006

Volumn 2006, Issue , 2006, Pages 316-325

  Chertov, Roman ^a,b   Fahmy, Sonia ^a,b   Shroff, Ness B ^a,c  

^a PURDUE UNIVERSITY   (United States)

^b PURDUE UNIVERSITY   (United States)

^c Purdue University   (United States)

Author keywords

Congestion control; Denial of service attacks; Emulation; Low rate TCP targeted attacks; Simulation; TCP; Testbeds

Indexed keywords

ATTACK PACKET SIZE; LOW-RATE TCP-TARGETED ATTACKS; RETRANSMISSION TIMEOUT; SERVICE ATTACK DENIAL;

COMPUTER SIMULATION; COMPUTER SOFTWARE; CONGESTION CONTROL (COMMUNICATION); MATHEMATICAL MODELS; NETWORK PROTOCOLS; ROUTERS;

TELECOMMUNICATION SERVICES;

EID: 33847138567     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TRIDNT.2006.1649164     Document Type: Conference Paper

References (39)

1. http://www.sangoma.com.
2. Classful Queueing Disciplines. http://www.tldp.org/HOWTO/Adv-Routing- HOWTO/lartc.qdisc.classful.html.
3. ImageStream and Cicso Comparison. http://www.imagestream.com/ Cisco_Comparison.html.
4. PC300 - The Router Killer. http://www.cyclades.com/resources/?wp=6.
5. OSS network routers. http://www.siriusit.co.uk/docs/doc.php?pageID= 8&typeID=3, December 2004.
6. S. Agarwal, J. Sommers, and P. Barford. Scalable network path emulation. In Modeling, Analysis, and Simulation of Computer and Telecommunication Systems (MASCOTS), September 2005.
7. M. Allman, V. Paxson, and W. Stevens. TCP congestion control. RFC 2581, April 1999.
8. D. G. Andersen. Mayday: Distributed filtering for internet services. In Proceedings of USITS, 2003.
9. A. Bianco, R. Birke, D. Bolognesi, J. Finochietto, G. Galante, M. Mellia, M. Prashant, and F. Neri. Click vs. linux: Two efficient open-source IP network stacks for software routers. In IEEE Workshop on High Performance Switching and Routing, May 2005.
10. Y. Chen, K. Hwang, and Y.-K. Kwok. Collaborative defense against periodic shrew DDoS attacks in frequency domain. Submitted, 2005. Available at: http://gridsec.usc.edu/files/TR/ACMTISSEC-LowRateAttack-May3-05.pdf.
11. D. Dittrich. The "stacheldraht" distributed denial of service attack tool. http://staff.washington.edu/dittrich/misc/stacheldraht.analysis, 1999.
12. P. Druschel, L. Peterson, and B. Davie. Experiences with a high-speed network adaptor: A software perspective. In Proceedings of the ACM SIGCOMM Conference, pages 2-13, August 1994.
13. R. Bajcsy et. al. Cyber defense technology networking and evaluation. Communications of the ACM, 47(3):58-61, March 2004.
14. S. Floyd and T. Henderson. The NewReno modification to TCP's fast recovery algorithm. RFC 2582, April 1999.
15. S. Floyd and E. Kohler. Internet research needs better models. SIGCOMM Comput. Commun. Rev., 33(1):29-34, 2003.
16. M. Guirguis, A. Bestavros, and I. Matta. Exploiting the transients of adaptation for RoQ attacks on internet resources. In Proceedings of ICNP, Oct 2004.
17. A. Hussain, J. Heidemann, and C. Papadopoulos. A framework for classifying denial of service attacks. In Proc. of ACM SIGCOMM, August 2003.
18. J. Ioannidis and S. M. Bellovin. Implementing pushback: Router-based defense against DDoS attacks. In NDSS, Feb 2002.
19. V. Jacobson. Congestion avoidance and control. In Proc. of the ACM SIGCOMM, volume 18, pages 314-329, August 1988.
20. C. Jin, H. Wang, and K. G. Shin. Hop-count filtering: An effective defense against spoofed DoS traffic. In Proc. of ACM CCS, pages 30-41, Oct 2003.
21. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek. The Click modular router. ACM Transactions on Computer Systems, 18(3):263-297, August 2000.
22. A. Kuzmanovic and E. W Knightly. Low-rate tcp-targeted denial of service attacks (the shrew vs. the mice and elephants). In Proc. of ACM SIGCOMM, August 2003.
23. D. Lin and R. Morris. Dynamics of random early dectection. In Proc. of the ACM SIGCOMM, volume 27, pages 127-136, September 1997.
24. X. Luo and R. K.-C. Chang. On a new class of pulsing denial-of-service attacks and the defense. In Network and Distributed System Security Symposium (NDSS), February 2005.
25. R. Mahajan, S. Floyd, and D. Wetherall. Controlling high-bandwidth flows at the congested router. In P roc. of IEEE ICNP, November 2001.
26. M. Mathis, J. Mahdavi, S. Floyd, and A. Romanow. TCP selective acknowledgement options. RFC 2018, October 1996.
27. J. Mirkovic and P. Reiher. A taxonomy of DDoS attacks and DDoS defense mechanisms. ACM Computer Communications Review, 34(2): 39-54, April 2004.
28. J. Mogul and K. K. Ramakrishnan. Eliminating receive livelock in an interrupt-driven kernel. ACM Transactions on Computer Systems, 15(3):217-252, August 1997.
29. D. Moore, G. Voelker, and S. Savage. Inferring Internet denial-of-service activity. In Proceedings of USENIX, 2001.
30. M. Muuss. The story of the TTCP program. http://ftp.arl.mil/~mike/ttcp. html.
31. T. J. Ott, T. V. Lakshman, and L. H. Wong. SRED: Stabilized RED. In Proc. of IEEE INFOCOM, volume 3, pages 1346-1355, March 1999.
32. J. Padhye, V. Firoiu, D. Towsley, and J. Kurose. Modeling TCP throughput: A simple model and its empirical validation. In P roc. of the ACM SIGCOMM, volume 28, pages 303-314, September 1998.
33. K. Park and H. Lee. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets. In Proceedings of ACM SIGCOMM, August 2001.
34. MOSES Project. iSSF and iSSFNet network simulators. http://www.linklings. net/MOSES/?page=software, 2005.
35. L. Rizzo, DummyNet. http://info.iet.unipi.it/~luigi/ip_dummynet/.
36. H. Sun, J. Lui, and D. Yau. Defending against low-rate TCP attacks: Dynamic detection and protection. In Proceedings of ICNP, Oct 2004.
37. UCB/LBNL/VINT groups. UCB/LBNL/VINT Network Simulator. http://www.isi.edu/nsnam/ns/, 2005.
38. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Joglekar. An integrated experimental environment for distributed systems and networks. In Proc. of OSDI, pages 255-270, December 2002.
39. A. Yaar, A. Perrig, and D. Song. SIFF: A stateless internet flow filter to mitigate DDoS flooding attacks. In IEEE Symposium on Security and Privacy, May 2004.