Intentional dropping: A novel scheme for SYN flooding mitigation

Proceedings - IEEE INFOCOM

Volumn , Issue , 2006, Pages

  Al Duwairi, Basheer ^a   Manimaran, G ^a  

^a Iowa State University of Science and Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTENTIONAL DROPPING; SYN FLOODING MITIGATION;

CLIENT SERVER COMPUTER SYSTEMS; COMPUTER CRIME; NETWORK SECURITY; SECURITY SYSTEMS;

PACKET LOSS;

EID: 39049149034     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2006.346     Document Type: Conference Paper

References (12)

1. R. Braden, "Requirements for Internet Hosts- Communication Layers," RFC 1122, October 1989.
2. CERT Advisory CA-1996-21, "TCP SYN Flooding and IP Spoofing Attacks," available at http://www.cert.org/advisories/CA-1996-21.html
3. Cisco systems, "Configuring TCP Intercept(Prevent Denial-of-Service Attacks)," available at: http://www.cisco.com/univercd/cc/td/doc/product/ software/ios113ed/113ed_cr/secur_c/scprt3/scdenial.htm
4. P. Ferguson and D. Senie, "Network ingress filtering: Defeating denial-of-service attacks which employ IP source address spoofing," RFC 2827, 2000.
5. V. Jacobson, "Congestion Avoidance and Control," in Proc. ACM SIGCOMM 1988, August 1988.
6. H. Jamjoom and K. G. Shin, "Persistent Dropping: An Efficient Control of Traffic Aggregates," In Proc. of SIGCOMM'03, Karlsruhe, Germany, August 25-29, 2003.
7. J. Lemon,"Resisting SYN flooding DoS attacks with a SYN cache," in Proc. USENIX BSD Con2002, pp.8998, February 2002.
8. J. Li, J. Mirkovic, M. Wang, P. Reiher, and L. Zhang., "SAVE: Source address validity enforcement protocol," in Proc. of IEEE INFOCOMM 2002, April, 2002.
9. M. Mellia, I. Stoica, and H. Zhang, "TCP Model for Short Lived Flows," in Proc. IEEE Communication Letters, Feb. 2002.
10. th USENIX Security Symposium, Washington, D.C. August, 2001
11. H. Wang and K. G. Shin, "Transport-Aware IP Routers: A Built-In Protection Mechanism to Counter DDoS Attacks," in Proc. of IEEE Transactions on Paralle and Distributed Systems, VOL. 14, NO. 9, SEP. 2003.
12. A. Zuquete, "Improving the functionality of SYN cookies," in Proc. of 6th IFIP Communications and Multimedia Security Conference, pp.5777, September 2002.