DDoS attacks by subverting membership management in P2P systems

2007 3rd IEEE Workshop on Secure Network Protocols, NPSec

Volumn , Issue , 2007, Pages 13-18

  Sun, Xin ^a   Torres, Ruben ^a   Rao, Sanjay ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DDOS ATTACKS; FUNDAMENTAL DESIGNS; IP ADDRESSES; LOGICAL IDENTIFIER; MEMBERSHIP INFORMATION; MEMBERSHIP MANAGEMENT; P2P SYSTEMS; PEER TO PEER SYSTEMS (P2P); PEER-TO-PEER (P2P) SYSTEMS; SECURE NETWORK PROTOCOLS;

COMPUTER SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; INTERNET; INTERNET PROTOCOLS; MACHINE DESIGN; MECHANISMS; NETWORK PROTOCOLS;

CLIENT SERVER COMPUTER SYSTEMS;

EID: 47249122258     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NPSEC.2007.4371618     Document Type: Conference Paper

References (27)

1. "Windows peer-to-peer networking," http://www.microsoft.com/ p2p.
2. S. Ali, A. Mathur, and H. Zhang, ""Measurement of commercial peer-to-peer live video streaming"," in Proc. of Workshop on Recent Advances in P2P Streaming, 2006.
3. X. Hei, C. Liang, J. Liang, Y. Liu, and K. Ross, ""Insights into pplive: A measurement study of a large-scale p2p iptv system"," in Proc. Workshop on Internet Protocol TV (IPTV) services over World Wide Web in conjunction with WWW2006, May 2006.
4. K. Cho, K. Fukuda, and H. Esaki, ""The impact and implications of the growth in residential user-to-user traffic"," in Proc. ACM SIGCOMM, 2006.
5. E. Sit and R.Morris, "Security Considerations for Peer-to-Peer Distributed Hash Tables," in Proceedings of the First International Workshop on Peer-to-Peer Systems (IPTPS), March 2002.
6. J. Douceur, "The Sybil Attack," in Proceedings of the First International Workshop on Peer-to-Peer Systems (IPTPS), March 2002.
7. M. Castro, P. Druschel, A. Ganesh, A. Rowstron, and D.S.Wallach, "Security for structured peer-to-peer overlay networks," in Proceedings of OSDI2002, December 2002.
8. A. Singh, T.-W. Ngan, D. P, and D. Wallach, "Eclipse Attacks on Overlays: Threats and Defenses," in Proceedings of INFOCOM 2006, April 2006.
9. D. Wallach, "A Survey of Peer-to-Peer Security Issues," in International Symposium on Software Security, November 2002.
10. V. Paxson, "An analysis of using reflectors for distributed denial-of-service attacks. Computer Communication Review 31(3), July 2001."
11. D. D. J.Mirkovic, S. Dietrich and P. Reiher, "Internet Denial of Service: Attack and Defense Mechanisms," 2005.
12. EMule, http://www.emule-project.net.
13. Y. Chu, A. Ganjam, T. S. E. Ng, S. G. Rao, K. Sripanidkulchai, J. Zhan, and H. Zhang, "Early Experience with an Internet Broadcast System Based on Overlay Multicast," in Proceedings of USENIX, June 2004.
14. P. Maymounkov and D. Mazieres, ""Kademlia: A peer-to-peer information system based on the xor metric."," in Proceedings of the 1st International Workshop on Peer-to-Peer Systems (IPTPS ?02), 2002.
15. BitTorrent, http://www.bittorrent.org.
16. X. Zhang, J. Liu, B. Li, and T.-S. P. Yum, "DONet/CoolStreaming: A Data-driven Overlay Network for Live Media Streaming," in Proceedings of IEEE INFOCOM, 2005.
17. D. Stutzbach and R. Rejaie, "Improving Lookup Performance over a Widely-Deployed DHT," proceedings of IEEE INFOCOM, 2006.
18. N. Naoumov and K. Ross, ""Exploiting p2p systems for DDoS attacks"," in "International Workshop on Peer-to-Peer Information Management", May 2006.
19. D. Malkhi, Y. Mansour, and M. Reiter, "Diffusing without false rumors: On propagating updates in a byzantine environment," Theoretical Computer Science, vol. 299, no. (1-3), pp. 289-306, 2003.
20. Y. Minsky and F. Schneider, "Tolerating malicious gossip," Distributed Computing, vol. 16, no. 1, pp. 49-68, February 2003.
21. X. Sun, R. Torres, and S. Rao, "Preventing DDoS Attacks with P2P Systems through Robust Membership Management," Tech. Rep., 2007.
22. E. Athanasopoulos, K.G.Anagnostakis, and E. Markatos, ""Misusing unstructured p2p systems to perform dos attacks: The network that never forgets"," in Proceedings of the 4th International Conference on Applied Cryptography and Network Security (ACNS'06), 2006.
23. K. E. Defrawy, M. Gjoka, and A. Markopoulou, ""BotTorrent: Misusing BitTorrent to launch DDoS attacks"," in Usenix SRUTI, 2007.
24. K. C. Sia, "DDoS Vulnerability Analysis of BitTorrent Protocol," Tech. Rep., 2007.
25. Prolexic, http://prolexic.com/news/20070514-alert.php.
26. V. Lam, S. Antonatos, P. Akritidis, and K. G. Anagnostakis, ""Puppetnets: Misusing web browsers as a distributed attack infrastructure"," in "Proc. of ACM Computer and Communication Security", 2006.
27. "DNS amplification attacks," http://www.isotf.org/news/DNS- Amplification-Attacks.pdf.