A pay-per-use DoS protection mechanism for the web

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3089, Issue , 2004, Pages 120-134

  Stavrou, Angelos ^a   Ioannidis, John ^a   Keromytis, Angelos D ^a   Misra, Vishal ^a   Rubenstein, Dan ^a  

^a Och Spine at New York Presbyterian Hospitals   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; AUTOMATION; INTERNET; INTERNET SERVICE PROVIDERS; INVESTMENTS; NETWORK ARCHITECTURE; NETWORK SECURITY; WEB SERVICES; WORLD WIDE WEB;

AUTOMATED PROCESS; DENIAL OF SERVICE; GRAPHIC TURING TESTS; MICRO-PAYMENT SCHEMES; NETWORK CONDITION; PAY-PER-USE SYSTEM; PROTECTION MECHANISMS; REVERSE TURING TEST;

DENIAL-OF-SERVICE ATTACK;

EID: 35048900638     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-24852-1_9     Document Type: Article

References (34)

1. D.G.Andersen. Mayday: Distributed Filtering for Internet Services. In 4th USENlX Symposium on Internet Technologies and Systems USITS, March 2003.
2. S. M. Bellovin. Distributed Firewalls, ;login: magazine, special issue on security, pages 37-39, November 1999.
3. W. J. Blackert, D. M. Gregg, A. K. Castner, E. M. Kyle, R. L. Horn, and R. M. Jokerst. Analyzing Interaction Between Distributed Denial of Service Attacks and Mitigation Technologies. In Proceedings of DISCEX III, pages 26-36, April 2003.
4. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote Trust Management System Version 2. RFC 2704, September 1999.
5. M. Blaze, J. Ioannidis, and A. D. Keromytis. Offline Micropayments without Trusted Hardware. In Proceedings of the Fifth International Conference on Financial Cryptography, pages 21-40, 2001.
6. CCITT. X.509: The Directory Authentication Framework. International Telecommunications Union, Geneva, 1989.
7. D. Chaum. Achieving Electronic Privacy. Scientific American, pages 96-101, August 1992.
8. B. Cox, D. Tygar, and M. Sirbu. NetBill security and transaction protocol. In Proceedings of the First USENIX Workshop on Electronic commerce. USENIX, July 1995.
9. D. Dean, M. Franklin, and A. Stubblefield. An Algebraic Approach to IP Traceback. In Proceedings of the Network and Dsitributed System Security Symposium (NDSS), pages 3-12, February 2001.
10. D. Dean and A. Stubblefield. Using client puzzles to protect TLS. In Proceedings of the 10th USENIX Security Symposium, August 2001.
11. V. D. Gligor. Guaranteeing Access in Spite of Distributed Service-Flooding Attacks. In Proceedings of the Security Protocols Workshop, April 2003.
12. M. T. Goodrich. Efficient Packet Marking for Large-Scale IP Traceback. In Proceedings of the 9th ACM Conference on Computer and Communications Security (CCS), pages 117-126, November 2002.
13. A. Herzberg. Safeguarding Digital Library Contents. D-lib Magazine, January 1998.
14. A. Hussain, J. Heidemann, and C. Papadopoulos. A Framework for Classifying Denial of Service Attacks. In Proceedings of ACM SIGCOMM, August 2003.
15. J. Ioannidis and S. M. Bellovin. Implementing Pushback: Router-Based Defense Against DDoS Attacks. In Proceedings of the Network and Distributed System Security Symposium (NDSS), February 2002.
16. J. Ioannidis, S. Ioannidis, A. D. Keromytis, and V. Prevelakis. Fileteller: Paying and Getting Paid for File Storage. In Proceeding of Financial Cryptography (FC) Conference, pages 282-299, March 2002.
17. S. Ioannidis, A. Keromytis, S. Bellovin, and J. Smith. Implementing a Distributed Firewall. In Proceedings of Computer and Communications Security (CCS), pages 190-199, November 2000.
18. C. Jin, H. Wang, and K. G. Shin. Hop-Count Filtering: An Effective Defense Against Spoofed DoS Traffic. In Proceedings of the 10th ACM International Conference on Computer and Communications Security (CCS), pages 30-41, October 2003.
19. D. Karger, E. Lehman, F. Leighton, R. Panigrahy, M. Levine, and D. Lewin. Consistent Hashing and Random Trees: Distributed Caching Protocols for Relievig Hot Spots on the World Wide Web. In Proceedings of ACM Symposium on Theory of Computing (STOC), pages 654-663, May 1997.
20. F. Kargl, J. Maier, and M. Weber. Protecting web servers from distributed denial of service attacks. In World Wide Web, pages 514-524, 2001.
21. S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. RFC 2401, Nov. 1998.
22. A. D. Keromytis, V. Misra, and D. Rubenstein. SOS: Secure Overlay Services. In Proceedings of ACM SlGCOMM, pages 61-72, August 2002.
23. W. G. Morein, A. Stavrou, D. L. Cook, A. D. Keromytis, V. Misra, and D. Rubenstein. Using Graphic Turing Tests to Counter Automated DDoS Attacks Against Web Servers. In Proceedings of the 10th ACM International Conference on Computer and Communications Security (CCS), pages 8-19, October 2003.
24. G. Mori and J. Malik. Recognizing Objects in Adversarial Clutter Breaking a Visual CAPTCHA. In Computer Vision and Pattern Recognition CVPR '03, June 2003.
25. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hussain, and R. Govindan. COSSACK: Coordinated Suppression of Simultaneous Attacks. In Proceedings of DlSCEX III, pages 2-13, April 2003.
26. K. Park and H. Lee. On the Effectiveness of Route-based PAcket Filtering for Distributed DoS Attack Prevention in Power-law Internets. In Proceedings of ACM SIGCOMM, pages 15-26, August 2001.
27. T. Poutanen, H. Hinton, and M. Stumm. NetCents: A Lightweight Protocol for Secure Micropayments. In Proceedings of the Third USENlX Workshop on Electronic Commerce. USENIX, September 1998.
28. P. Reiher, J. Mirkovic, and G. Prier. Attacking DDoS at the source. In Proceedings of the 10th IEEE International Conference on Network Protocols, November 2002.
29. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Network Support for IP Traceback. ACM/IEEE Transactions on Networking, 9(3):226-237, June 2001.
30. I. Stoica, R. Morris, D. Karger, F. Kaashoek, and H. Balakrishnan. Chord: A Scalable Peer-To-Peer Lookup Service for Internet Application. In Proceedings of ACM SIGCOMM, August 2001.
31. L. Tang. A Set of Protocols for MicroPayments in Distributed Systems. In Proceedings of the First USENIX Workshop on Electronic Commerce. USENIX, July 1995.
32. R. Thomas, B. Mark, T. Johnson, and J. Croall. NetBouncer: Client-legitimacy-based High-performance DDoS Filtering. In Proceedings of DISCEX III, pages 14-25, April 2003.
33. L. von Ahn, M. Blum, N. J. Hopper, and J. Langford. CAPTCHA: Using Hard AI Problems For Security. In Proceedings of EUROCRYPT'03, 2003.
34. A. Yaar, A. Perrig, and D. Song. Pi: A Path Identification Mechanism to Defend against DDoS Attacks. In Proceedings of the IEEE Symposium on Security and Privacy, May 2003.