A framework for a collaborative DDoS defense

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2006, Pages 33-42

  Oikonomou, George ^a   Mirkovic, Jelena ^a   Reiher, Peter ^b   Robinson, Max ^c  

^a UNIVERSITY OF DELAWARE   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c AEROSPACE CORPORATION   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DEFCOM; DISTRIBUTED DENIAL-OF-SERVICE (DDOS);

INTERNET; SECURITY OF DATA; VIRTUAL REALITY;

COMPUTER SUPPORTED COOPERATIVE WORK;

EID: 34648867936     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2006.5     Document Type: Conference Paper

References (19)

1. D. G. Andersen. Mayday: Distributed Filtering for Internet Services. In 4th Usenix Symposium on Internet Technologies and Systems, Seattle, WA, March 2003.
2. T. Benzel, B. Braden, D. Kim, C. Neuman, A. Joseph, K. Sklower, R. Ostrenga, and S. Schwab. Experience with DETER: A testbed for security research. In Proceedings of TRIDENTCOM, March 2006.
3. R. Canonico, D. Cotroneo, L. Peluso, S. P. Romano, and G. Ventre. Programming routers to improve network security. In OPENSIG 2001 Workshop Next Generation Network Programming, September 2001.
4. P. Ferguson and D. Senie. Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing. RFC 2267, 2000.
5. J. Ioannidis and S. M. Bellovin. Implementing Pushback: Router Based Defense Against DDoS Attacks. In ISOC Symposium on Network and Distributed System Security, February 2002.
6. A. Keromytis, V. Misra, and D. Rubenstein. SOS: An Architecture for Mitigating DDoS Attacks. IEEE Journal on Selected Areas in Communications, 22(1), January 2004.
7. J. Mirkovic. D-WARD: source-end defense against distributed denial-of-service attacks. PhD thesis, UCLA, 2003.
8. J. Mirkovic, G. Prier, and P. L. Reiher. Attacking DDoS at the Source. In Proceedings of the International Conference on Network Protocols, pages 312-321, 2002.
9. J. Mirkovic, M. Robinson, and P. Reiher. Alliance formation for DDoS defense. In Proceedings of the New Security Paradigms Workshop, pages 11-18, New York, NY, USA, 2003. ACM Press.
10. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hussain, and R. Govindan. COSSACK: Coordinated Suppression of Simultaneous Attacks. In Proceedings of DISCEX, pages 213, 2003.
11. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proceedings of the ACM SIGCOMM, pages 295-306, 2000.
12. S. Shin, K. Kim, and J. Jang. D-SAT: Detecting SYN Flooding Attack by Two-Stage Statistical Approach. In SAINT Symposium, pages 430-436, 2005.
13. Z. Shu and P. Dasgupta. Denying Denial-of-Service Attacks: A Router Based Solution. In International Conference on Internet Computing, pages 301-307, 2003.
14. Q. Song. Perimeter-Based Defense against High Bandwidth DDoS Attacks. IEEE Transactions on Parallel and Distributed Systems, 16(6):526-537, 2005.
15. I. Stoica, S. Shenker, and H. Zhang. Core-stateless fair queueing: a scalable architecture to approximate fair bandwidth allocations in high-speed networks. IEEE/ACM Transactions on Networking, 11(1 ):33-46, 2003.
16. H. Wang and K. G. Shin. Transport-aware ip routers: A built-in protection mechanism to counter ddos attacks. IEEE Transactions on Parallel and Distributed Systems, 14(9):873-884, 2003.
17. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Joglekar. An integrated experimental environment for distributed systems and networks. In Proceedings of the Operating System Design and Implementation, pages 255-270, 2002.
18. X. Yang, D. Wetherall, and T. Anderson. A DoS-limiting network architecture. In Proceedings of ACM SIGCOMM, pages 241-252, 2005.
19. D. K. Y. Yau, J. C. S. Lui, F. Liang, and Y. Yam. Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles. IEEE/ACM Transactions on Networking, 13(1):29-42, 2005.