IDR: An intrusion detection router for defending against Distributed Denial-of-Service (DDoS) attacks

Proceedings of the International Symposium on Parallel Architectures, Algorithms and Networks, I-SPAN

Volumn , Issue , 2004, Pages 581-586

  Chan, Eric Y K ^a   Chan, H W ^a   Chan, K M ^a   Chan, Vivien P S ^a   Chanson, Samuel T ^b   Cheung, Matthew M H ^a   Chong, C F ^a   Chow, K P ^a   Hui, Albert K T ^b   Hui, Lucas C K ^a   Lam, Luke C K ^a   Lau, W C ^a   Pun, Kevin K H ^a   Tsang, Anthony Y F ^a   Tsang, W W ^a   Tso, Sam C W ^a   Yeung, Dit Yan ^b   Yu, K Y ^a  

^a UNIVERSITY OF HONG KONG   (Hong Kong)

^b HONG KONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Hong Kong)

Author keywords

[No Author keywords available]

Indexed keywords

DENIAL-OF-SERVICE (DOS); INTRUSION DETECTION ROUTER (IDR); PACKET CLASSIFICATION;

ALGORITHMS; COMPUTER ARCHITECTURE; GRAPHIC METHODS; INTERFACES (COMPUTER); MATHEMATICAL MODELS; NETWORK PROTOCOLS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC; TRAFFIC CONTROL; TREES (MATHEMATICS);

ROUTERS;

EID: 3543070612     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISPAN.2004.1300541     Document Type: Conference Paper

References (19)

1. Paul Barford and Mark Crovella. Generating representative web workloads for network and server performance evaluation. In SIGMETRICS '98 / PERFORMANCE '98, Joint International Conference on Measurement and Modeling of Computer Systems, pages 151-160, Madison, Wisconsin, USA, June 1998.
2. Jason Barlow and Woody Thrower. Tfn2k - an analysis. Information Security Bulletin, CHI Publihsing Ltd, March 2000.
3. Burton H. Bloom. Space/time trade-offs in hash coding with allowable errors. Communications of the ACM(CACM), 13(7):422-426, July 1970.
4. Eric Y. K. Chan and et al. Ddos attack detection and defense using routers (submitted to 13th usenix security symposium (security '04)).
5. Michails Faloutsos, Petros Faloutsos, and Christos Faloutsos. On power-law relationships of the internet topology. In Proceedings of the conference on Applications, technologies, architectures, and protocols for computer communication, pages 251-262, Cambridge, Massachusetts, United States, August 1999. ACM Press.
6. National Laboratory for Applied Network Research (NLANR) http://dast.nlanr.net/Projects/Iperf, 2003.
7. Lee L. Gremillion. Designing a bloom filter for differential file access. Communications of the ACM (CACM), 25(9):600-604, September 1982.
8. Kevin J. Houle, George M. Weaver, Nell Long, and Rob Thomas. Trends in denial of service attack technology. CERT(R) Coordination Center, October 2001. v1.0.
9. Multi Router Traffic Grapher (MRTG) http://people.ee.ethz.ch/oetiker/ webtools/mrtg.
10. Comoputer Emergency Response Team (CERT) http://www.cert.org.
11. Yoohwan Kim, Wing Cheong Lau, Mooi Choo Chuah, and Jonathan H. Chao. Packetscore: Statistical-based overload control against deistributed denial-of-service attacks. In Proceedings IEEE INFOCOM 2004, The 23rd Annual Joint Conference of the IEEE Computer and Communications Societies, Hong Kong, China, March 2004.
12. Abhishek Kumar, Li Li, and Jia Wang. Space-code bloom filter for efficient traffic flow measurement. In Proceedings of the conference on Internet measurement conference, pages 167-172, 2003.
13. Danielle Liu and Frank Huebner. Application profiling of ip traffic. In 27th Annual IEEE Conference on Local Computer Networks (LCN 2002), pages 220-229, Tampa, Florida, USA, November 2002.
14. James K. Mullin. A second look at bloom filters. Communications of the ACM (CACM), 26(8):570-571, August 1983.
15. Kihong Park and Heejo Lee. On the effectiveness of probabilistic packet marking for ip traceback under denial of service attack. In Proceedings IEEE INFOCOM 2001, The Conference on Computer Communications, Twentieth Annual Joint Conference of the IEEE Computer and Communications Societies, Twenty years into the communications odyssey, volume 1, pages 338-347, Anchorage, Alaska, USA, April 2001. IEEE.
16. Jih-Kwon Peir, Shih-Chang Lai, Shin-Lien Lu, Jared Stark, and Konrad Lai. Bloom filtering cache misses for accurate data speculation and prefetching. In ICS 2002, Proceedings of the 2002 International Conference on Supercomputing, pages 189-198, New York City, NY, USA, June 2002.
17. Stefan Savage, David Wetherall, Anna R. Karlin, and Tom Anderson. Practical network support for ip traceback. In Proceedings of the ACM SIGCOMM 2000 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, pages 295-306, Stockholm, Sweden, August 2000. ACM Press.
18. Alex C. Snoeren, Craig Partridge, Luis A. Sancheq, Christine E. Jones, Fabrice Tchakountio, Stephen T. Kent, and W. Timothy Strayer. Hash-based ip traceback. In Proceedings of the ACM SIGCOMM 2001 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, pages 3-14, San Diego, CA, USA, August 2001.
19. Haining Wang, Danlu Zhang, and Kang G. Shin. Detecting syn flooding attacks. In Proceedings IEEE INFOCOM 2002, The 21st Annual Joint Conference of the IEEE Computer and Communications Societies, New York, USA, June 2002. IEEE.