Mayday: Distributed Filtering for Internet Services

4th USENIX Symposium on Internet Technologies and Systems, USITS 2003

Volumn , Issue , 2003, Pages

  Andersen, David G ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY; WEB SERVICES;

CLIENT AUTHENTICATION; DISTRIBUTED FILTERING; INTERNET SERVICES; OVERLAY ROUTING; PACKET FILTERING; PROTOCOL VERIFICATION; SECURITY AND PERFORMANCE; SIMPLE PACKET FILTERING;

DENIAL-OF-SERVICE ATTACK;

EID: 35048820228     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (31)

1. Mazu networks. http://www.mazunetworks.com/solutions/, 2002.
2. ANDERSEN, D., BALAKRISHNAN, H., KAASHOEK, M., AND MORRIS, R. Resilient Overlay Networks. In Proc. 18th ACM SOSP (Banff, Canada, Oct. 2001), pp. 131–145.
3. ANDERSEN, D. G., FEAMSTER, N., BAUER, S., AND BALAKRISHNAN, H. Topology inference from BGP routing dynamics. In Proc. Internet Measurement Workshop (Marseille, France, 2002).
4. ARBOR NETWORKS. Peakflow for enterprises datasheet. http://arbornetworks.com/up_media/up_files/Pflow_Enter_ datasheet2.1.pdf%, 2002.
5. ASTA NETWORKS. Convergence of security and network performance (vantage system overview). http://www.astanetworks.com/products/data_sheets/asta_data_ sheet.pdf, 2002.
6. BELLOVIN, S. ICMP Traceback Messages, Internet-Draft, draft-bellovin-itrace-00.txt, Work in Progress, Mar. 2000.
7. CAIDA Analysis of Code-Red. http://www.caida.org/analysis/security/ code-red/, 2002.
8. CHAUM, D. Untraceable electronic mail, return addresses and digital pseudonyms. Communications of the ACM 24, 2 (1981), 84–88.
9. DARMOHRAY, T., AND OLIVER, R. Hot spares for DoS attacks. ;Login: The Magazine of USENIX and SAGE (July 2000).
10. DEAN, D., FRANKLIN, M., AND STUBBLEFIELD, A. An algebraic approach to IP traceback. Information and System Security 5, 2 (2002), 119–137.
11. FERGUSON, P., AND SENIE, D. Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing. RFC 2267, Jan. 1998.
12. FERGUSON, P., AND SENIE, D. Network Ingress Filtering. Internet Engineering Task Force, May 2000. Best Current Practice 38, RFC 2827.
13. FREEDMAN, M. J., AND MORRIS, R. Tarzan: A peer-to-peer anonymizing network layer. In Proceedings of the 9th ACM Conference on Computer and Communications Security (Washington, D.C., Nov. 2002).
14. GOLDSMITH, D., AND SCHIFFMAN, M. Firewalking: A traceroute-like analysis of IP packet responses to determine gateway access control lists. http://www.packetfactory.net/firewalk/, 1998.
15. IOANNIDIS, J., AND BELLOVIN, S. M. Implementing Pushback: Router-Based Defense Against DDoS Attacks. In Proc. Network and Distributed System Security Symposium (NDSS) (San Diego, CA, Feb. 2002).
16. JANNOTTI, J., GIFFORD, D. K., JOHNSON, K. L., KAASHOEK, M. F., AND O’TOOLE JR., J. W. Overcast: Reliable multicasting with an overlay network. In Proc. 4th USENIX OSDI (San Diego, California, October 2000), pp. 197–212.
17. JUNIPER NETWORKS. M-series Internet Processor II ASIC Frequently Asked Questions. http://www.juniper.net/solutions/faqs/m-series_ip2.html.
18. KEROMYTIS, A. D., MISRA, V., AND RUBEN-STEIN, D. SOS: Secure overlay services. In Proc. ACM SIGCOMM (Pittsburgh, PA, 2002), pp. 61–72.
19. MOORE, D., VOELKER, G., AND SAVAGE, S. Inferring Internet denial of service activity. In Proc. USENIX Security Symposium (Aug. 2001).
20. PARK, K., AND LEE, H. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law Internets. In Proc. ACM SIGCOMM (San Diego, CA, 2001).
21. SANFILIPPO, S. Posting about the IP ID reverse scan. http://www.kyuzz.org/antirez/papers/dumbscan.html, 1998.
22. SANFILIPPO, S. hping home page. http://www.hping.org/, 2000.
23. SAVAGE, S., COLLINS, A., HOFFMAN, E., SNELL, J., AND ANDERSON, T. The End-to-End Effects of Internet Path Selection. In Proc. ACM SIGCOMM (Boston, MA, 1999), pp. 289–299.
24. SAVAGE, S., WETHERALL, D., KARLIN, A., AND ANDERSON, T. Network support for IP traceback. IEEE/ACM Transactions on Networking 9, 3 (June 2001).
25. SIT, E., AND MORRIS, R. Security considerations for peer-to-peer distributed hash tables. In Proc. 1st International Workshop on Peer-to-Peer Systems (IPTPS) (Cambridge, MA, Feb. 2002).
26. SNOEREN, A. C., AND BALAKRISHNAN, H. An End-to-End Approach to Host Mobility. In Proc. 6th ACM/IEEE MOBICOM (Aug. 2000).
27. SNOEREN, A. C., PARTRIDGE, C., SANCHEZ, L. A., JONES, C. E., TCHAKOUNTIO, F., SCHWARTZ, B., KENT, S. T., AND STRAYER, W. T. Single-packet IP traceback. IEEE/ACM Transactions on Networking (ToN) (to appear) 10, 6 (Dec. 2002).
28. SPRING, N., MAHAJAN, R., AND WETHERALL, D. Measuring ISP topologies with Rocketfuel. In Proc. ACM SIGCOMM (Aug. 2002).
29. STOICA, I., MORRIS, R., KARGER, D., KAASHOEK, M. F., AND BALAKRISHNAN, H. Chord: A scalable peer-to-peer lookup service for Internet applications. In Proceedings of the ACM SIGCOMM’01 Conference (San Diego, California, Aug. 2001).
30. VASKOVICH, F. Nmap stealth port scanner. http://www.insecure.org/nmap/index.html, 2002.
31. Akamai. http://www.akamai.com, 1999.