Probabilistic packet marking for large-scale IP traceback

IEEE/ACM Transactions on Networking

Volumn 16, Issue 1, 2008, Pages 15-24

  Goodrich, Michael T ^a  

^a Irvine   (United States)

Author keywords

Associate addresses; Checksum cords; Distributed denial of service (DDOS); IP; Probabilistic packet marking; Traceback

Indexed keywords

INTERNET PROTOCOLS; LARGE SCALE SYSTEMS; ROUTERS;

ASSOCIATE ADDRESSES; CHECKSUM CORDS; DISTRIBUTED DENIAL OF SERVICE; PROBABILISTIC PACKET MARKING; TRACEBACK;

PACKET NETWORKS;

EID: 40749152296     PISSN: 10636692     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNET.2007.910594     Document Type: Article

References (14)

1. A. Anagnostopoulos, M. T. Goodrich, and R. Tamassia, "Persistent authenticated dictionaries and their applications," in Proc. Information Security Conf. (ISC 2001), 2001, vol. LNCS 2200, pp. 379-393, Springer-Verlag.
2. T. Baba and S. Matsuda, "Tracing network attacks to their sources," IEEE Internet Computing, vol. 6, no. 2, pp. 20-26, 2002.
3. S. M. Bellovin, "ICMP traceback messages," work in Progress, Internet Draft draft-bellovin-itrace-00.txt, Mar. 2000.
4. H. Burch and B. Cheswick, "Tracing anonymous packets to their approximate source," in Proc. Usenix LISA (New Orleans) Conf., 2000, pp. 313-322.
5. D. Dean, M. Franklin, and A. Stubblefield, "An algebraic approach to IP traceback," in Proc. Network and Distributed System Security Symp. (NDSS), 2001, pp. 3-12.
6. M. T. Goodrich, "Efficient packet marking for large-scale IP traceback," in Proc. 9th ACM Conf. Computer and Communications Security (CCS), 2002, pp. 117-126.
7. M. T. Goodrich, R. Tamassia, and A. Schwerin, "Implementation of an authenticated dictionary with skip lists and commutative hashing," in Proc. 2001 DARPA Information Survivability Conf. Expo., 2001, vol. 2, pp. 68-82.
8. J. Ioannidis and S. M. Bellovin, "Implementing Pushback: Router-based defense against DDOS attacks," in Proc. Network and Distributed System Security Symp., 2002.
9. T. K. T. Law, D. K. Y. Yau, and J. C. S. Lui, "You can run, but you can't hide: An effective statistical methodology to trace back DDOS attackers," IEEE Trans. Parallel Distrib. Syst., vol. 16, no. 9, pp. 799-813, Sep. 2005.
10. R. Motwani and P. Raghavan, Randomized Algorithms. New York: Cambridge Univ. Press, 1995.
11. S. Savage, D. Wetherall, A. R. Karlin, and T. Anderson, "Practical network support for IP traceback," in Proc. ACM SIGCOMM, 2000, pp. 295-306.
12. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, and W. T. Strayer, "Hash-based IP traceback," in Proc. ACM SIGCOMM 2001 Conf. Applications, Technologies, Architectures, and Protocols for Computer Communication, San Diego, CA, 2001.
13. D. Song and A. Perrig, "Advanced and authenticated marking schemes for IP traceback," in Proc. IEEE INFOCOM, 2001, pp. 878-886.
14. R. Stone, "Centertrack: An IP overlay network for tracking DoS floods," in Proc. 9th USENIX Security Symp., Denver, CO, Aug. 2000.