Active cache based defense against DoS attacks in wireless mesh network

2007 2nd International Symposium on Wireless Pervasive Computing

Volumn , Issue , 2007, Pages 419-424

  Santhanam, Lakshmi ^a   Nandiraju, Deepti ^a   Nandiraju, Nagesh ^a   Agrawal, Dharma P ^a  

^a University of Cincinnati

Author keywords

DoS attack; Internet gateway; MFU; Spoofing

Indexed keywords

CACHE MEMORY; COMPUTER SIMULATION; GATEWAYS (COMPUTER NETWORKS); INTERNET; NETWORK SECURITY; ROUTERS; TELECOMMUNICATION TRAFFIC;

SPOOFING; WIRELESS MESH NETWORKS (WMN);

WIRELESS NETWORKS;

EID: 34548120700     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISWPC.2007.342640     Document Type: Conference Paper

References (20)

1. N. B. Salem and J.-P. Hubaux, "Securing wireless mesh networks," IEEE Wireless Communications, 13(2), pp. 15-55, April 2006.
2. C. Cordeiro, and D. P. Agrawal, "Ad hoc & sensor networks, theory and applications," World scientific publishing, spring 2006, ISBN No. 81-256-681-3; 81-256-682-1 (paper back).
3. R. Poor: "Wireless mesh networks," In Sensors Magazine, 2003.
4. CERT Advisory CA-2000-01, "Denial-of-Service Developments," CERT, 2000; www.cert.org/advisories/CA-2000-01.html.
5. P. Ferguson, and D. Senie, "Network ingress filtering: defeating denial of service attacks which employ IP source address spoofing," In Internet Eng. Task Force RFC 2827, May 2000; www.ietf.org/rfc/rfc2827.txt.
6. K. Park, and H. Lee, "On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets," In the Proc. of ACM SIGCOMM, pp. 15-26, 2001.
7. A. Yaar, A. Perrig, and D. Song, "Pi: A path identification mechanism to defend against DDoS attacks," In the Proc. of IEEE Symposium on Security and Privacy, 2003.
8. L. Santhanam, A. Kumar, and D. P. Agrawal, "Taxonomy of IP traceback," In the Journal of Information Assurance and Security, Vol. 1, No. 1, pp. 79-94, 2006.
9. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Practical network support for IP traceback," In the Proc. of ACM SIGCOM 2000, IEEE/ACM Trans. Networking, Vol. 9, No. 3, pp. 226-237, 2001.
10. A. C. Snoeren, C. Patridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, and W.T. Strayer, "Hash-based IP traceback," In the Journal of IEEE/ACM Trans. Networking, Vol. 1.0, No. 6, pp. 721-734, 2002.
11. S. Floyd, and V. Jacobson, "Random early detection gateways for congestion avoidance," In the Proc. of IEEE/ACM Transactions on Networking, Vol. 1,No. 4, August 1993.
12. D. Lin, and R. Morris, "Dynamics of random detection," In the Proc. of ACM SIGCOMM 1997.
13. B. Suter, T. V. Lakshman, D. Stiliadis, and A. K. Choudhary, "Design consideration for supporting TCP with per-flow queuing," In the proc. of INFOCOMM 1998.
14. R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker, "Controlling high bandwidth aggregates in the network," Computer Communication Review 32(3), July 2002.
15. A. Yaar, A. Perrig, and D. Song, "SIFF: A stateless internet flow filter to mitigate DDoS flooding attacks," In the Proc. of the IEEE Symposium on. Security and Privacy, May 2004.
16. N. S. Nandiraju, D. Nandiraju, L. Santhanam, and D. P. Agrawal, "A cache based traffic regulator for improving performance in IEEE 802.11s based mesh networks," In the Proc. of the RWC, 2006.
17. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDOS at the Source," In the Proc. of the 10th IEEE International Conference on Network Protocols, pp. 312-321, 2002.
18. I. Stoica, S. Shenker, and H. Zhang, "Core-stateless fair queuing: A scalable architecture to approximate fair bandwidth allocations in high speed networks," In the Proc. of SIFCOMM, 1998.
19. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash crowds and denial of service attacks: Characterization and Implications for CDNs and Web Sites," In WWW, May 2002.
20. A. Ramanamathan, "WADeS: A tool for distributed denial of service attack detection," Thesis, University of Texas, A &M, 2002.