On deterministic packet marking

Computer Networks

Volumn 51, Issue 10, 2007, Pages 2677-2700

  Belenky, Andrey ^a   Ansari, Nirwan ^a  

^a NEW JERSEY INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

DDoS attacks; IP traceback; Security

Indexed keywords

BANDWIDTH; INTERNET SERVICE PROVIDERS; REAL TIME SYSTEMS; TELECOMMUNICATION SERVICES; USER INTERFACES;

DDOS ATTACKS; DETERMINISTIC PACKET MARKING (DPM); IP TRACEBACK;

PACKET SWITCHING;

EID: 34247634501     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2006.11.020     Document Type: Article

References (41)

1. P. Ferguson, D. Senie, Network ingress filtering: defeating denial of service attacks which employ IP source address spoofing, RFC 2827, May 2000.
2. Savage S., Wetherall D., Karlin A., and Anderson T. Network support for IP traceback. IEEE/ACM Trans. Networking 9 3 (2001) 226-237
3. Park K., and Lee H. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets. Proc. of the 2001 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, August (2001), ACM Press, New York, NY, USA 15-26
4. C. Morrow, B. Gemberling, How to track a DoS attack (nanog post) [Online]. .
5. D. Moore, G.M. Voelker, S. Savage, Inferring Internet denial of service activity, in: Proc. 10th USENIX Security Symposium, 2001, pp. 9-22.
6. Chang R.K.C. Defending against flooding-based distributed denial-of-service attacks: a tutorial. IEEE Commun. Mag. 40 10 (2002) 42-51
7. Belenky A., and Ansari N. On IP traceback. IEEE Commun. Mag. 41 7 (2003) 142-153
8. S.M. Bellovin, ICMP traceback messages, IETF Draft, March 2000.
9. S.F. Wu, L. Zhang, D. Massey, A. Mankin, Intention-driven ICMP trace-back, IETF Draft, February 2001 [Online]. .
10. S.F. Wu, L. Zhang, D. Massey, A. Mankin, On design and evaluation of intention-driven ICMP traceback, in: Proc. 10th Inter. Conf. on Computer Comm. and Networks, October 2001, pp. 159-165.
11. Dean D., Franklin M., and Stubblefield A. An algebraic approach to ip traceback. ACM Trans. Inform. Syst. Security (TISSEC) 5 2 (2002) 119-137
12. D.X. Song, A. Perrig, Advanced and authenticated marking schemes for IP traceback, in: Proc. INFOCOM 2001, April 2001, vol. 2, pp. 878-886.
13. Doeppner T.W., Klein P.N., and Koyfman A. Using router stamping to identify the source of IP packets. Proc. of 7th ACM Inter. Conf. on Computer Comm. and Networks, November (2000), ACM Press, New York, NY, USA 184-189
14. Tseng Y.K., and Hsieh H.H.C.W.S. Probabilistic packet parking with non-preemptive compensation. IEEE Commun. Lett. 8 6 (2004) 359-361
15. A. Yaar, A. Perrig, D. Song, Pi: a path identification mechanism to defend against DDoS attacks, in: Proc. 2003 Symposium on Security and Privacy, 2003, May 2003, pp. 93-107.
16. A. Yaar, A. Perrig, D. Song, FIT: fast Internet traceback, in: INFOCOM 2005, March 2005, vol. 2, pp. 1395-1406.
17. M.T. Goodrich, Efficient packet marking for large-scale IP traceback, in: CCS'02: Proc. of the 9th ACM Conf. on Comp. and Comm. Sec., November 2002, pp. 117-126.
18. Gao Z., and Ansari N. A practical and robust inter-domain marking scheme for IP traceback. Computer Networks 51 3 (2007) 732-750
19. Snoeren A.C., et al. Single-packet IP traceback. IEEE/ACM Trans. Networking 10 6 (2002) 721-734
20. Baba T., and Matsuda S. Tracing network attacks to their sources. IEEE Internet Comput. 6 2 (2002) 20-26
21. S. Matsuda, T. Baba, A. Hayakawa, T. Nakamura, Design and implementation of unauthorized access tracing system, in: Proc. of the 2002 Symposium on Applications and the Internet, 2002 (SAINT 2002), January/February 2002, pp. 74-81.
22. J. Li, M. Sung, J. Xu, L. Li, Large-scale IP traceback in high-speed Internet: practical techniques and theoretical foundation, in: Proc. 2004 IEEE Symposium on Security and Privacy, May 2004, pp. 115-129.
23. R. Stone, Centertrack: an IP overlay network for tracking DoS floods, in: Proc. of 9th USENIX Security Symposium, August 2000.
24. H. Chang et al., Deciduous: decentralized source identification for network-based intrusions, in: Proc. of 6th IFIP/IEEE International Symposium on Integrated Net. Management, May 1999, pp. 701-714.
25. H. Chang et al., Design and implementation of a real-time decentralized source identification system for untrusted ip packets, in: Proc. of the DARPA Information Survivability Conference & Exposition, January 2000, vol. 2, pp. 100-111.
26. H. Burch, B. Cheswick, Tracing anonymous packets to their approximate source, in: Proc. of 2000 USENIX LISA Conference, December 2000, pp. 319-327.
27. Belenky A., and Ansari N. IP traceback with deterministic packet marking. IEEE Commun. Lett. 7 4 (2003) 162-164
28. A. Belenky, IP Traceback with Deterministic Packet Marking (DPM), Ph.D. dissertation, NJIT, Newark, August 2003.
29. A. Belenky, N. Ansari, Tracing multiple attackers with deterministic packet marking (DPM), in: Proc. of IEEE PacRim, August 2003, vol. 1, pp. 49-52.
30. Shannon C., Moore D., and Claffy K.C. Beyond folklore: observations on fragmented traffic. IEEE/ACM Trans. Networking 10 6 (2002) 709-720
31. J. Mogul, S. Deering, Path MTU discovery, RFC 1191, November 1990.
32. J. Postel, Internet protocol, RFC 791, September 1981.
33. D.D. Clark, IP datagram reassembly algorithms, RFC 815, July 1982.
34. F. Baker, Requirements for IP version 4 routers, RFC 1812, June 1995.
35. Feller W. An Introduction to Probability Theory and Its Applications (1968), John Wiley & Sons, Inc.
36. R. Braden, Requirements for Internet hosts - communication layers, RFC 1122, October 1989.
37. S. McCreary, C.K. Claffy, Trends in wide area IP traffic patterns, in: ITC Specialist Seminar, CAIDA, 2000.
38. Bhattacharyya S., Diot C., and Jetcheva J. Pop-level and access-link-level traffic dynamics in a tier-1 POP. Proc. of the First ACM SIGCOMM Workshop on Internet Measurement Workshop (2001), ACM Press, New York, NY, USA 39-53
39. Carter E. Cisco Secure Intrusion Detection Systems. 1st ed. (2001), Cisco Press, Indianapolis, IN
40. Paxson V. An analysis of using reflectors for distributed denial-of-service attacks. Comput. Commun. Rev. 31 3 (2001) 38-47
41. IBM TotalStorage Product Guide, IBM Systems Group, October 2006 [Online]. .