A distributed throttling approach for handling high bandwidth aggregates

IEEE Transactions on Parallel and Distributed Systems

Volumn 18, Issue 7, 2007, Pages 983-995

  Tan, Chee Wei ^a   Chiu, Dah Ming ^b   Lui, John C S ^b   Yau, David K Y ^c  

^a Princeton University   (United States)

^b CHINESE UNIVERSITY OF HONG KONG   (Hong Kong)

^c Purdue University   (United States)

Author keywords

DDoS attacks; Network security; Resource management

Indexed keywords

ALGORITHMS; BANDWIDTH; CONGESTION CONTROL (COMMUNICATION); DATA COMMUNICATION SYSTEMS; ROUTERS; SERVERS;

DISTRIBUTED THROTTLING APPROACH; HIGH BANDWIDTH AGGREGATES; PUBLIC-ACCESS NETWORKS; RESOURCE MANAGEMENT;

NETWORK SECURITY;

EID: 34250324251     PISSN: 10459219     EISSN: None     Source Type: Journal    
DOI: 10.1109/TPDS.2007.1034     Document Type: Article

References (23)

1. F.M. Anjum and L. Tassiulas, "Fair Bandwidth Sharing among Adaptive and Non-Adaptive Flows in the Internet," Proc. IEEE INFOCOM '99, Mar. 1999.
2. C. Albuquerque, B.J. Vickers, and T. Suda, "Network Border Patrol: Preventing Congestion Collapse and Promoting Fairness in the Internet," IEEE/ACM Trans. Networking, vol. 12, no. 1, pp. 173-186, Feb. 2004.
3. L. Benmohamed and S.M. Meerkov, "Feedback Control of Congestion in Packet Switching Networks: The Case of a Single Congested Node," IEEE/ACM Trans. Networking, vol. 1, no. 6, pp. 693-708, Dec. 1993.
4. D.M. Chiu and R. Jain, "Analysis of the Increase/Decrease Algorithms for Congestion Avoidance in Computer Networks," J. Computer Networks and ISDN, vol. 17, no. 1, pp. 1-14, June 1989.
5. W. Feng, K. Shin, D. Kandlur, and D. Saha, "Stochastic Fair Blue: A Queue Management Algorithm for Enforcing Fairness," Proc. IEEE INFOCOM '01, Apr. 2001.
6. C.V. Hollot, V. Misra, D. Towsley, and W. Gong, "Analysis and Design of Controllers for AQM Routers Supporting TCP Flows," IEEE Trans. Automatic Control, vol. 47, no. 6, pp. 945-959, June 2002.
7. K.Y.K. Hui, J.C.S. Lui, and D.K.Y. Yau, "Small-World Overlay P2P Networks," Computer Networks, vol. 50, no. 15, Oct. 2006.
8. D. Katabi, M. Handley, and C. Rohrs, "Congestion Control for High Bandwidth-Delay Product Networks," Proc. ACM SIGCOMM, pp. 89-102, Aug. 2002.
9. R. Karp, E. Koutsoupias, C. Papadimitriou, and S. Shenker, "Optimization Problems in Congestion Control," Proc. 41st Ann. IEEE CS Conf. Foundations of Computer Science, Nov. 2000.
10. Y. Kim, W.C. Lau, M.C. Chuah, and J.H. Chao, "PacketScore: Statistics-Based Overload Control against Distributed Denial-of-Service Attacks," Proc. IEEE INFOCOM '04, Mar. 2004.
11. A. Kolarov and G. Ramamurthy, "A Control-Theoretic Approach to the Design of an Explicit Rate Controller for ABR Service," IEEE/ACM Trans. Networking, vol. 7, no. 5, pp. 741-753, Oct. 1999.
12. S. Kunniyur and R. Srikant, "Analysis and Design of an Adaptive Virtual Queue Algorithm for Active Queue Management," Proc. ACM SIGCOMM, pp. 123-134, Aug. 2001.
13. B.C. Kuo, Automatic Control Systems. Prentice Hall, 1975.
14. K.T. Law, J.C.S. Lui, and D.K.Y. Yau, "You Can Run, But You Can't Hide: An Effective Statistical Methodology to Trace Back DDoS Attackers," IEEE Trans. Parallel and Distributed Systems, vol. 16, no. 9, Sept. 2005.
15. Q. Li, E. Chang, and M.C. Chan, "On the Effectiveness of DDoS Attacks on Statistical Filtering," Proc. IEEE INFOCOM '05, Mar. 2005.
16. R. Mahajan, S.M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Schenker, "Controlling High Bandwidth Aggregates in the Network," ACM SIGCOMM Computer Comm. Rev., vol. 32, no. 3, pp. 62-73, July 2003.
17. R. Mahajan, S. Floyd, and D. Wetherall, "Controlling High-Bandwidth Flows at the Congested Router," Proc. Ninth IEEE Int'l Conf. Network Protocols, Nov. 2001.
18. B.C.B. Chan, J.C.F. Lau, and J.C.S. Lui, "OPERA: An Open-Source Extensible Router Architecture for Adding New Network Services and Protocols," J. Systems and Software, vol. 78, no. 1, pp. 24-36, Oct. 2005.
19. R. Pan, B. Prabhakar, and K. Psounis, "CHOKe: A Stateless AQM Scheme for Approximating Fair Bandwidth Allocation," Proc. IEEE INFOCOM '00 Mar. 2000.
20. H. Wang, D. Zhang, and K.G. Shin, "Detecting SYN Flooding Attacks," Proc. IEEE INFOCOM '02, June 2002.
21. T.Y. Wong, J.C.S. Lui, and M.H. Wong, "An Efficient Distributed Algorithm to Identify and Traceback DDoS Traffic," Computer J., vol. 49, no. 4, 2006.
22. D.K.Y. Yau, J.C.S. Lui, F. Liang, and Y. Yeung, "Defending against Distributed Denial-of-Service Attacks with Max-Min Fair Server-Centric Router Throttles," IEEE/ACM Trans. Networking, vol. 13, no. 1, Feb. 2005.
23. H. Xu, A. Datta, and S.P. Bhattacharyya, "PID Stabilization of LTI Plants with Time-Delay," Proc. 42nd IEEE Conf. Decision and Control Dec. 2003.