Towards stateless single-packet IP traceback

Proceedings - Conference on Local Computer Networks, LCN

Volumn , Issue , 2007, Pages 548-555

  Laufer, Rafael P ^a   Velloso, Pedro B ^b   De Cunha, Daniel O ^b   Moraes, Igor M ^c   Bicudo, Marco D D ^c   Moreira, Marcelo D D ^c   Duarte, Otto Carlos M B ^c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b SORBONNE UNIVERSITÉ   (France)

^c FEDERAL UNIVERSITY OF RIO DE JANEIRO   (Brazil)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTERS; DATA STRUCTURES; DECODING; FILE ORGANIZATION; INTERNET; INTERNET PROTOCOLS; NETWORK ARCHITECTURE; NETWORK SECURITY;

BLOOM FILTERING; DENIAL OF SERVICE (DOS) ATTACKS; HIGH ACCURACY; INTERNET ARCHITECTURE; INTERNET PROTOCOLS (IP) SPOOFING; IP TRACEBACK; LOCAL COMPUTER; MALICIOUS NODES; NETWORK CORE; PATH RECONSTRUCTION; SIMULATION RESULTS; TAMPER RESISTANT;

COMPUTER NETWORKS;

EID: 47249087303     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LCN.2007.160     Document Type: Conference Paper

References (25)

1. L. A. Gordon, M. P. Loeb, W. Lucyshyn, and R. Richardson, 2005 CSI/FBI Computer Crime and Security Survey, 2006.
2. H. Burch and B. Cheswick, "Tracing Anonymous Packets to their Approximate Source," in USENIX LISA'00, New Orleans, Lousiana, USA, Dec. 2000, pp. 319-327.
3. R. Stone, "CenterTrack: An IP Overlay Network for Tracking DoS Floods," in 9th USENIX Security Symposium, Denver, Colorado, USA, Aug. 2000, pp. 199-212.
4. InformationWeek.com, Dutch Botnet Bigger Than Expected, Oct. 2005.
5. CERT Advisory CA-1996-26 Denial-of-Service Attack via ping, CERT, Dec. 1996.
6. CERT Advisory CA-1997-28 IP Denial-of-Service Attacks, CERT, Dec. 1997.
7. Cisco Security Advisory: Cisco IOS Interface Blocked by IPv4 Packets, Cisco Systems, Inc., July 2003.
8. F. Gont, "ICMP Attacks Against TCP," Internet Draft: draft-gont-tcpm-icmp-attacks-03.txt, Dec. 2004.
9. Vulnerability Note VU#222750: TCP/IP Implementations Do Not Adequately Validate ICMP Error Messages, US-CERT, Apr. 2005.
10. CERT Incident Note IN-99-07 Distributed Denial-of-Service Tools, CERT, Nov. 1999.
11. Y. Zhang and V. Paxson, "Detecting Stepping Stones," in Proceedings of the 9th USENIX Security Symposium, Denver, Colorado, USA, Aug. 2000, pp. 171-184.
12. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Network Support for IP Traceback," IEEE/ACM Transactions on Networking, vol. 9, no. 3, pp. 226-237, June 2001.
13. D. Dean, M. Franklin, and A. Stubblefleld, "An Algebraic Approach to IP Traceback," ACM Transactions on Information and System Security, vol. 5, no. 2, pp. 119-137, May 2002.
14. S. M. Bellovin, M. D. Leech, and T. Taylor, "ICMP Traceback Messages," Internet Draft: draft-ietf-itrace-04.txt, Aug. 2003.
15. A. Mankin, D. Massey, C.-L. Wu, S. F. Wu, and L. Zhang, "On Design and Evaluation of 'Intention-Driven' ICMP Traceback," in Proceedings of the IEEE ICCCN 2001 Conference, Scottsdale, Arizona, USA, Oct. 2001.
16. D. X. Song and A. Perrig, "Advanced and Authenticated Marking Schemes for IP Traceback," in Proceedings of the IEEE INFOCOM 2001 Conference, Anchorage, Alaska, USA, Apr. 2001.
17. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, B. Schwartz, S. T. Kent, and W. T. Strayer, "Single-Packet IP Traceback," IEEE/ACM Transactions on Networking, vol. 10, no. 6, pp. 721-734, Dec. 2002.
18. L. H. M. K. Costa, S. Fdida, and O. C. M. B. Duarte, "Incremental Service Deployment Using the Hop-By-Hop Multicast Routing Protocol," IEEE/ACM Transactions on Networking, vol. 14, no. 3, pp. 543-556, 2006.
19. B. H. Bloom, "Space/Time Trade-offs in Hash Coding with Allowable Errors," Communications of the ACM, vol. 7, no. 13, pp. 442-426, July 1970.
20. R. P. Laufer, P. B. Velloso, D. de O. Cunha, I. M. Moraes, M. D. D. Bicudo, and O. C. M. B. Duarte, "A New IP Traceback System against Denial-of-Service Attacks," in 12th International Conference on Telecommunications, Capetown, South Africa, May 2005.
21. R. P. Laufer, P. B. Velloso, and O. C. M. B. Duarte, "Generalized Bloom Filters," Universidade Federal do Rio de Janeiro, COPPE/PEE, Tech. Rep. GTA-05-43, Sept. 2005.
22. D. Magoni and J.-J. Pansiot, "Internet Topology Modeler Based on Map Sampling," in IEEE International Symposium on Computer Communications, July 2002.
23. A. Yaar, A. Perrig, and D. Song, "Pi: A Path Identification Mechanism to Defend against DDoS Attacks," in Proceedings of the IEEE Symposium on Security and Privacy, Oakland, California, USA, May 2003, pp. 93-107.
24. H. Song, S. Dharmapurikar, J. Turner, and J. Lockwood, "Fast Hash Table Lookup Using Extended Bloom Filter: an Aid to Network Processing," in Proceedings of the ACM SIGCOMM'05 Conference, Philadelphia, PA, USA, Aug. 2005, pp. 181-192.
25. F. Bonomi, M. Mitzenmacher, R. Panigrahy, S. Singh, and G. Varghese, "Beyond Bloom Filters: From Approximate Membership Checks to Approximate State Machines," in Proceedings of the ACM SIGCOMM'06 Conference, Pisa, Italy, Sept. 2006, pp. 315-326.