Internet cache pollution attacks and countermeasures

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2006, Pages 54-64

  Gao, Yan ^a   Deng, Leiwen ^a   Kuzmanovic, Aleksandar ^a   Chen, Yan ^a  

^a Northwestern University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BLOOM FILTERING; CACHE POLLUTION; CACHE REPLACEMENT POLICIES; COMPUTATION TECHNIQUES; COUNTERMEASURES (CM); DENIAL OF SERVICE (DOS) ATTACKS; DETECTION ACCURACY; DISTRIBUTED ATTACKS; EFFICIENT METHODS; EVALUATION RESULTS; IN ORDER; INTERNATIONAL CONFERENCES; LARGE-SCALE SIMULATIONS; PEER-TO-PEER (P2P); PROXY CACHING;

BUFFER STORAGE; DOS; INTERNET; INTERNET PROTOCOLS; MATHEMATICAL TRANSFORMATIONS; MECHANISMS; POLLUTION;

NETWORK PROTOCOLS;

EID: 46149091310     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2006.320198     Document Type: Conference Paper

References (37)

1. V. Pai, L. Wang, K. Park, R. Pang, and L. Peterson, "The dark side of the Web: An open proxy's view," in HotNets, 2003.
2. "Akamai," http://www.akamai.com/.
3. CNET News.com, "P2p caching: Unsafe at any speed?" 2003, http://news.com.com/2100-1025.3-1027508.html.
4. K. Gummadi, R. Dunn, S. Saroiu, S. Gribble, H. Levy, and J. Zahorjan, "Measurement, modeling, and analysis of a peer-to-peer file-sharing workload," in ACM SOSP, 2003.
5. B. Bloom, "Space/time trade-offs in hash coding with allowable errors," Communications of ACM, vol. 13, no. 7, pp. 422-426, 1970.
6. J. Jung, B. Krishnamurthy, and M. Rabinovich, 'Flash crowds and denial of service attacks: Characterization and implications for CDNs and Web sites," in ACM WWW, 2002.
7. D. Wessels, "Report on the effect of the independent council report on the NLANR Web caches," 1998, http://www.ircache.net/Statistics/ICreport/ .
8. Australian IT, "Music industry raids KaZaA offices." 2004, http://www.afterdown.com/news/archieve/4948.cfm.
9. BBC News, "File swappers fight back," 2003, http://news.bbc.co.uk/1/hi/technology/3013065.stm.
10. J. Liang, R. Kumar, Y. Xi, and K. Ross, "Pollution in p2p file sharing systems," in IEEE INFOCOM, 2005.
11. J. Jung, E. Sit, H. Balakrishnan, and R. Morris, "DNS performance and the effectiveness of caching," IEEE/ACM Transactions on Networking, vol. 10, no. 5, pp. 589-603, 2002.
12. "Verisign. the domain name industry brief," 2005, http://www.verisign.com/Resources/Naming_Services_Resources/ Domain_Name_Industry_Brief/.
13. D. Bernstein, "How to adjust the cache size," http://cr.yp.to/djb.html.
14. M. Handley and A. Greenhalgh, "The case for pushing DNS," in Proceedings of HotNets, College Park, Maryland, 2005.
15. J. Wang, X. Liu, and A. Chien, "Empirical study of tolerating denial-of-service attacks with a proxy network," in Usenix Security Symposium, 2005.
16. A. Chankhunthod, P. Danzig, C. Neerdaels, M. Schwartz, and K. Worrell, "A hierarchical Internet object cache," in USENIX Technical Conference, 1996.
17. L. Fan, P. Cao, J. Almeida, and A. Broder, "Summary cache: A scalable wide-area Web cache sharing protocol," in ACM SIGCOMM, 1998.
18. M. Rabinovich, J. Chase, and S. Gadde, "Not all hits are created equal: Cooperative proxy caching over a wide area network," in WWW Caching Workshop, 1998.
19. J. Touch, "The LSAM proxy cache - a multicast distributed virtual cache," in WWW Caching Workshop, 1998.
20. R. Tewksbury, "Is the Internet heading for a cache crunch?" 1998, http://www.isoc.org/oti/printversions/0198prtewks.html.
21. A. Wolman, G. Voelker, N. Sharma, N. Cardwell, A. Karlin, and H. Levy, "On the scale and performance of cooperative Web proxy caching," in ACM SOSP, 1999.
22. V. Almeida, D. Menasci, R. Riedi, F. Ribeiro, R. Fonseca, and W. Meira, "Analyzing robot behavior and their impact on caching," in Workshop on Web Caching and Content Delivery, 2001.
23. A. Balamash and M. Krunz, "An overview of Web caching replacement algorithms," IEEE Communications Surveys & Tutorials, vol. 6, no. 2, pp. 44-56, 2004.
24. "Squid Web proxy cache," http://www.squid-cache.org/.
25. M. Arlitt, L. Cherkasova, J. Dilley, R. Friedrich, and T. Jin, "Evaluating content management techniques for web proxy caches," in HP Labs TR, 1999. [Online]. Available: http://www.hpl.hp.com/techreports/ 1999/HPL-1999-69.html
26. J. Dilley, M. Arlitt, and S. Perret, "Enhancement and validation of Squid's cache replacement policy," in HP Labs TR, 1999. [Online]. Available: http://www.hpl.hp.com/techreports/1999/HPL-1999-69.html
27. F. Smith, F. Campos, K. Jeffay, and D. Ott, "What TCP/IP protocol headers can tell us about the Web," in ACM SIGMETRICS, 2001.
28. Y Chen, L. Qiu, W. Chen, L. Nguyen, and R. Katz, "Efficient and adaptive Web replication using content clustering," IEEE Journal on Selected Areas in Communications, vol. 21, no. 6, pp. 979-994, 2003.
29. L. Qiu, V. Padmanabhan, and G. Voelker, "On the placement of Web server replica," in IEEE INFOCOM, 2001.
30. S. Sen and J. Wang, "Analyzing peer-to-peer traffic across large networks," IEEE/ACM Transactions on Networking, vol. 12, no. 2, pp. 219-232, 2005.
31. L. Breslau, P. Cao, L. Fan, G. Phillips, and S. Shenker, "Web caching and Zipf-like distributions: Evidence and implications," in IEEE INFOCOM, 1999.
32. MSNBC, "http://www.msnbc.com."
33. L. Bent, M. Rabinovich, G. M. Voelker, and Z. Xiao, " Characterization of a large web site population with implications for content delivery," in International World Wide Web Conference, 2004.
34. M. Walfish, H. Balakrishnan, D. Karger, and S. Schenker, "DoS: Fighting fi re with fire," in HotNets, 2005.
35. G. Armitage, "Inferring the extent of network address port translation at public/private internet boundaries, Tech. Rep. CAIA TR 020712A, 2002.
36. "Anti-pollution engine system," http://tough.cs.northwestern. edu/AE/.
37. "Dummynet," http://info.iet.unipi.it/~luigi/ip dummynet/.