Adaptive defense against various network attacks

Steps to Reducing Unwanted Traffic on the Internet Workshop, SRUTI 2005

Volumn , Issue , 2005, Pages 69-75

  Zou, Cliff C ^a   Duffield, Nick ^b   Towsley, Don ^a   Gong, Weibo ^a  

^a UNIVERSITY OF MASSACHUSETTS   (United States)

^b AT AND T LABS RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ADAPTIVE SYSTEMS; NETWORK SECURITY; SYSTEMS ANALYSIS;

ADAPTIVE DETECTION; COST MINIMIZATION; DISTRIBUTED DENIAL OF SERVICE ATTACK; FALSE NEGATIVES; FILTERING ALGORITHM; HIGH-LEVEL SYSTEMS; NETWORK CONDITION; SECURITY DEFENSE;

DENIAL-OF-SERVICE ATTACK;

EID: 47249156592     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. CERT. CERT/CC advisories. http://www.cert.org/advisories/.
2. GIL, T. M., AND POLETTO, M. MULTOPS: a data-structure for bandwidth attack detection. In Proceedings of USENIX Security Symposium (August 2002).
3. JIN, C., WANG, H., AND SHIN, K. G. Hop-count filtering: an effective defense against spoofed DDoS traffic. In Proceedings of 10th ACM Conference on Computer and Communications Security (October 2003).
4. JUNG, J., PAXSON, V., BERGER, A. W., AND BALAKRISHNAN, H. Fast portscan detection using sequential hypothesis testing. In Proceedings of the IEEE Symposium on Security and Privacy (May 2004).
5. JUNG, J., SCHECHTER, S. E., AND BERGER, A. W. Fast detection of scanning worm infections. In Proceedings of the 7th International Symposium on Recent Advances in Intrusion Detection (RAID) (September 2004).
6. KEROMYTIS, A., MISRA, V., AND RUBENSTEIN, D. A framework for classifying denial of service attacks. In Proceedings of ACM SIGCOMM (August 2003).
7. KIM, H., AND KARP, B. Autograph: Toward automated, distributed worm signature detection. In Proceedings of 13th USENIX Security Symposium (August 2004).
8. KIM, Y., LAU, W., CHUAH, M., AND CHAO, H. Packetscore: Statistical-based overload control against distributed denial-ofservice attacks. In Proceedings of the IEEE INFOCOM (March 2004).
9. LEE, W., FAN, W., MILLER, M., STOLFO, S., AND ZADOK, E. Toward cost-sensitive modeling for intrusion detection and response. Journal of Computer Security 10, 1,2 (2002).
10. MIRKOVIC, J., AND REIHER, P. A taxonomy of DDoS attack and DDoS defense mechanisms. ACM SIGCOMM Computer Communication Review 34, 2 (2004).
11. PANG, R., YEGNESWARAN, V., BARFORD, P., PAXSON, V., AND PETERSON, L. Characteristics of Internet background radiation. In Proceedings of the Internet Measurement Conference (IMC) (October 2004).
12. SAVAGE, S.,WETHERALL, D., KARLIN, A., AND ANDERSON, T. Practical network support for IP traceback. In Proceedings of ACM SIGCOMM (August 2001).
13. SINGH, S., ESTAN, C., VARGHESE, G., AND SAVAGE, S. Automated worm fingerprinting. In Proceedings of the 6th ACM/USENIX Symposium on Operating System Design and Implementation (OSDI) (December 2004).
14. STANIFORD, S. Containment of scanning worms in enterprise networks. Journal of Computer Security (2003).
15. WEAVER, N., STANIFORD, S., AND PAXSON, V. Very fast containment of scanning worms. In Proceedings of 13th USENIX Security Symposium (August 2004).
16. WILLIAMSON, M. M. Throttling viruses: Restricting propagation to defeat mobile malicious code. In 18th Annual Computer Security Applications Conference (December 2002).
17. ZOU, C. C., GONG, W., AND TOWSLEY, D. Worm propagation modeling and analysis under dynamic quarantine defense. In Proceedings of ACM CCS Workshop on Rapid Malcode (WORM'03) (October 2003).