Stateful DDoS attacks and targeted filtering

Journal of Network and Computer Applications

Volumn 30, Issue 3, 2007, Pages 823-840

  Chen, Shigang ^a   Tang, Yong ^a   Du, Wenliang ^b  

^a University of Florida   (United States)

^b Syracuse University   (United States)

Author keywords

Distributed denial of service; Network security; Stateful attacks

Indexed keywords

ACCESS CONTROL; COMPUTER OPERATING SYSTEMS; INTERNET; PROBLEM SOLVING; SIGNAL FILTERING AND PREDICTION;

DISTRIBUTED DENIAL OF SERVICE; PERFORMANCE BOUNDS; STATEFUL ATTACKS; TARGETED FILTERING;

NETWORK SECURITY;

EID: 33947683843     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2005.07.007     Document Type: Article

References (32)

1. Andersen D.G. Mayday: distributed filtering for internet services. Proceedings of the fourth USENIX symposium on internet technologies and systems (March 2003)
2. Aura T, Nikander P, Leiwo J. DoS-resistant authentication with client puzzles. Cambridge security protocols workshop 2000. Lecture notes in computer science. Berlin: Springer; 2000.
3. Bellovin SM. ICMP traceback messages. IETF, draft-bellovin-itrace-05.txt, March 2000, work in progress.
4. Bernstein DJ. SYN cookies. 1997. http://cr.yp.to/syncookies.html
5. Burch H., and Cheswick B. Tracing anonymous packets to their approximate source. Proceedings of the USENIX LISA'00 (2000)
6. Computer Emergency Response Team. CERT advisory CA-1998-01 Smurf IP denial-of-service attacks. January 1998, http://www.cert.org/advisories/CA-1998-01.html
7. Computer Emergency Response Team. CERT advisory CA-2003-20 W32/blaster worm. August 2003, http://www.cert.org/advisories/CA-2003-20.html
8. Chen S, Song Q. Perimeter-based defense against high bandwidth DDoS attacks. IEEE Trans Parallel Distributed Syst 2005;16(7).
9. Dean D, Stubblefield A. Using client puzzles to protect TLS: Tenth Annual USENIX security symposium; 2001.
10. Ferguson P, Senie D. Network ingress filtering: defeating denial of service attacks which employ IP source address spoofing, IETF, RFC 2267, Janurary 1998.
11. Gibson S. The strange tale of the denial of service attacks against GRC.COM. 2002, http://grc.com/dos/grcdos.htm.
12. Juel A., and Brainard J. Client puzzles: a cryptographic countermeasure against connection depletion attacks. Proceedings of the network and distributed system security symposium, NDSS'99 (February 1999)
13. Kaufman C., Perlman R., and Speciner M. Network security. 2nd ed (2002), Prentice-Hall PTR, Englewood Cliffs, NJ ISBN: 0-13-046019-2
14. Keromytis A.D., Misra V., and Rubenstein D. SOS: secure overlay services. Proceedings of the ACM SIGCOMM'2002 (August 2002)
15. Lemon J. Resisting SYN flood DoS attacks with a SYN cache. Proceedings of the USENIX BSDCON2002 (February 2002)
16. Mahajan P., Bellovin S.M., Floyd S., Ioannidis J., Paxson V., and Shenker S. Controlling high bandwidth aggregates in the network. Comput Commun Rev 32 3 (2002) 62-73
17. Moore D., Voelker G., and Savage S. Inferring internet denial of service activity. Proceedings of the USENIX security symposium 2001 (August 2001)
18. Northcutt S., and Novak J. Network intrusion detection. 3rd ed. (2002), New Riders Publishing ISBN: 0735712654
19. Park K., and Lee H. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets. Proceedings of the ACM SIGCOMM'2001 (August 2001)
20. Park K., and Lee H. On the effectiveness of probabilistic packet marking for IP traceback under denial of service attacks. Proceedings of the IEEE INFOCOM'2001 (March 2001)
21. Savage S., Wetherall D., Karlin A., and Anderson T. Practical network support for IP traceback. Proceedings of the ACM SIGCOMM'2000 (August 2000)
22. Schnackenberg D., Djahandari K., and Sterne D. Infrastructure for intrusion detection and response. Proceedings of the First DARPA information survivability conference and exposition (January 2000)
23. Schuba C., Krsul I., Kuhn M., Spafford E., Sundaram A., and Zamboni D. Analysis of a denial of service attack on TCP. Proceedings of the IEEE symposium on security and privacy (1997)
24. Snoren A.C., Partridge C., Sanchez L.A., Jones C.E., Tchakountio F., Kent S.T., et al. Hash-based IP traceback. Proceedings of the ACM SIGCOMM'2001 (August 2001)
25. Song D., and Perrig A. Advanced and authenticated marking schemes for IP traceback. Proceedings of the IEEE INFOCOM'2001 (March 2001)
26. Stoica I., Morris R., Karger D., Kaashoek F., and Balakrishnan H. Chord: a scalable peer-to-peer lookup service for internet applications. ACM SIGCOMM'2001 (2001)
27. Stone R. CenterTrack: an IP overlay network for tracking DoS floods. Proceedings of the USENIX security symposium'00 (August 2000)
28. Sung M., and Xu J. IP Traceback-based intelligent packet filtering: a novel technique for defending against internet DDoS attacks. IEEE Trans Parallel Distributed Syst 14 9 (2003) 861-872
29. Wang X, Reiter MK. Defending against denial-of-service attacks with puzzle auctions. IEEE symposium on security and privacy; May 2003.
30. Wang H., Zhang D., and Shin K.G. SYN-dog: sniffing SYN flooding sources. Proceedings of the 22nd international conference on distributed computing systems, ICDCS'02 (July 2002)
31. Wu SF, Zhang L, Massey D, Mankin A. Intention-driven ICMP trace-back, IETF, internet draft, draft-wu-itrace-intention-00.txt February 2001, work in progress.
32. Xu J., and Lee W. Sustaining availability of web services under distributed denial of service attacks. IEEE Trans Comput 52 2 (2003) 195-208