Reduction of Quality (RoQ) attacks on dynamic load balancers: Vulnerability assessment and design tradeoffs

Proceedings - IEEE INFOCOM

Volumn , Issue , 2007, Pages 857-865

  Guirguis, Mina ^a   Bestavros, Azer ^b   Matta, Ibrahim ^b   Zhang, Yuting ^c  

^a TEXAS STATE UNIVERSITY   (United States)

^b BOSTON UNIVERSITY   (United States)

^c ALLEGHENY COLLEGE   (United States)

Author keywords

Denial of service; Load balancing; Performance evaluation; Security

Indexed keywords

COMPUTER SIMULATION; INTERNET; OPTIMIZATION; PUBLIC POLICY; QUEUEING NETWORKS; RESOURCE ALLOCATION;

DENIAL OF SERVICE; FEEDBACK DELAY; PERFORMANCE EVALUATION; REDUCTION OF QUALITY (ROQ);

DYNAMIC LOADS;

EID: 34548297939     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2007.105     Document Type: Conference Paper

References (34)

1. W. Aiello, A. werbuch, B. Maggs, and S. Rao. Approximate Load Balancing on Dynamic and Asynchronous Networks. In Proceedings of the ACM Symposium on Theory of Computing, 1993.
2. Akamai. Performance Based Load Balancing, http://www.akamai.com/en/html/ services/gtm_how_it_works.html.
3. A. Allen. Probability, Statistics and Queueing Theory with Computer Science Applications. Second Edition, Academic Press.
4. M. Balter, M. Crovella, and C. Murta. On Choosing a Task Assignment Policy for a Distributed Server System. Journal of Parallel and Distributed Computing, Sep 1999.
5. V. Cardellini, M. Colajanni, and P. Yu. Dynamic load balancing on web-server systems. IEEE Internet Computing, 1999.
6. CERT Coordination Center. CERT Advisory CA-1996-21 TCP SYN Flooding and IP Spoofing Attacks. http://www.cert.org/advisories/CA-1996-21.html. Original issue date: September 19, 1996.
7. CERT Coordination Center. Denial of Service Attacks, http://www.cert.org/ tech_tips/denial_of_service.html.
8. CERT Coordination Center. Trends in Denial of Service Attack Technology. http://www.cert.org/archive/pdf/DoS_trends.pdf.
9. L. Cherkasova. FLEX: Load Balancing and Management Strategy for Scalable Web Hosting Service. In Proceedings of ISCC, Jul 2000.
10. J. Chuang. Distributed Network Storage Service with Quality-of-Service Guarantees. In Proceedings of Internet Society INET'99, San Jose, CA, June 1999.
11. Cisco. Configuring Load Balancing on the CSS 11500. http://www.cisco.com/ warp/public/117/methods_load_bal.pdf.
12. Cisco. LocalDirector. http://www.cisco.com/warp/public/cc/pd/cxsr/400/ index.shtml.
13. W. Kish D. Dias, R. Mukherjee, and R. Tewari. A Scalable and Highly Available Web Server. In Proceedings of IEEE COMPCON, 1996.
14. F5. BIG-IP Load Balancer Limited, http://www.f5.com/f5products/products/ bigip/ltm/lbl.html.
15. B. Fortz and M. Thorup. Internet traffic engineering by optimizing OSPF weights. In Proceedings of IEEE INFOCOM, 2000.
16. M. Guirguis, A. Bestavros, and I. Matta. Exploiting the Transients of Adaptation for RoQ Attacks on Internet Resources. In Proceedings of the ICNP, Oct 2004.
17. M. Guirguis, A. Bestavros, I. Matta, and Y. Zhang. Reduction of Quality (RoQ) Attacks on Internet End Systems. In Proceedings of INFOCOM, Mar 2005.
18. IBM. DB2 connection routing using Linux load balancing, http://www-128.ibm.com/developerworks/db2/library/techarticle/dm-0410wright/.
19. IBM. High availability load balancing with IBM WebSphere Edge Server for Lotus Workplace. http://www-128.ibm.com/developerworks/lotus/library/ edgehighavail/.
20. S. Kandula, D. Katabi, M. Jacob, and A. Berger. Botz-4-Sale: Surviving Organized DDoS Attacks That Mimic Flash Crowds. In Proceedings of NSDI, Boston, MA, May 2005.
21. L. Kleinrock and R. Muntz. Processor Sharing Queueing Models of Mixed Scheduling Disciplines for Time Shared System. Journal of the ACM, 1972.
22. A. Kuzmanovic and E. Knightly. Low-Rate TCP-Targeted Denial of Service Attacks (The Shrew vs. the Mice and Elephants). In Proceedings of ACM SIGCOMM, karlsruhe , Germany, August 2003.
23. S. Lam and A. Shankar. Response Time Distributions for a Multi-Class Queue with Feedback. In Proceedings of the International Symposium on Computer Performance Modeling, Measurement and Evaluation, May 1980.
24. M. Guirguis. Reduction-of-Quality Attacks on Adaptation Mechanisms. Ph.D. Thesis. Boston University.
25. C. Meadows. A Formal Framework and Evaluation Method for Network Denial of Service. In Proceedings of the 12th IEEE Computer Security Foundations Workshop, June 1999.
26. Microsoft. Network Load Balancing Technical Overview. http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/ nlbovw.mspx.
27. Microsoft. SharePoint Services, http://www.microsoft.com/resources/ documentation/wss/2/all/adminguide/en-us/stsf15.mspx.
28. mini_httpd: small HTTP server, http://acme.com/software/mini_httpd.
29. J. Mirkovic, J. Martin, and P. Reiher. A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms. Technical Report 020018, Computer Science Department, University of California, Los Angeles.
30. J. Mogul. Network behavior of a busy Web server and its clients. Research Report 95/5, DEC Western Research Laboratory, Oct 1995.
31. D. Mosberger and T. Jin. Httperf: A Tool for Measuring Web Server Performance. In Proceedings of the First workshop on Internet Server Performance (WISP '98), Madison, WI, June 1998.
32. Nortel. Alteon Web OS Traffic Control. http://www.nortelnetworks.com/ products/01/webos/index.html.
33. O. Othman and D. Schmidt. Optimizing Distributed system Performance via Adaptive Middleware Load Balancing. In Proceedings of ACM SIGPLAN Workshop on Optimization of Middleware and Distributed Systems (OM), 2000.
34. Cisco Systems. Sticky Configuration Methods on LocalDirector. http://www.cisco.eom/warp/public/117/local_director/sticky_config_1d.pdf.