A practice of the intrusion prevention system

IEEE Region 10 Annual International Conference, Proceedings/TENCON

Volumn , Issue , 2007, Pages

  Wuu, Lih Chyau ^a   Chen, Yen Hung ^a   Ma, Chih Chieh ^b   Lung, I Tao ^b  

^a NATIONAL YUNLIN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Taiwan)

^b Institute of Nuclear Energy Research

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK PACKETS; DISTRIBUTED DENIAL-OF-SERVICE ATTACKS; EDGE ROUTER; INTERNET BACKBONE; INTRUSION PREVENTION SYSTEM; NETWORK BANDWIDTHS; SOURCE-END DEFENSE;

INTERNET; SECURITY OF DATA; TELECOMMUNICATION SYSTEMS; TELECOMMUNICATION TRAFFIC; WEIGHT CONTROL;

INTERNET PROTOCOLS;

EID: 48649097500     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TENCON.2007.4428862     Document Type: Conference Paper

References (22)

1. D. Dunne, "What is a Denial of Service Attack?", http://www.darwinmag.com/learn/curve/column.html.
2. C. Douligeris and A. Mitrokotsa, "DDoS attacks and defense mechanisms: classification and state-of-the-art", Computer Networks 44 (2004) 643-666.
3. C. Dembeck, "E-Commerce Cites Crippled by Hacker Sabotage", 2000, http://newsfactor.com /perl/story/2466.html.
4. L. Garber, "Denial-of-Service Attacks Rip the Internet", Computer, Apr 2000, pp.12-17.
5. A.C. Snoeren, C. Partridge, L.A. Sanchez, and C.E. Jones, "Hash-Based IP Traceback", 2001, SIGCOMM, Aug 2001, pp.27-31.
6. S. Savage, D. Wetherall, A. Karlin, T. Anderson, "Practical Network Support for IP Traceback", Department of Computer Science and Engineering, 2000.
7. D.X. Song, A. Perring, "Advanced and Authenticated Marking Schemes for IP Traceback", SIGCOMM, Jun 2000.
8. S. Bellovin, "Internet Draft: ICMP Traceback Messages", Aug 2003.
9. M. Soshi, "Efficient and Robust IP Traceback", http://www.jaist.ac.jp/is/GRP/Projects /IP_Traceback.htm.
10. D-WARD, "DDoS Network Attack Recogni -tion and Defense", http://www.lasr.cs. cla.edu/ ddos/.
11. J. Mirkovic, G. Prier, and P. Reiher, "Source- End DDoS Defense", IEEE International Sym. on Network Computing and Application, 2003.
12. RCF2267, "Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing", 1998.
13. L.C. Wuu, Chan S.H., and C.H. Hung, "Implement an IP Traceback on Linux Platform", 2006 symposium on Open Source Technology and Applications, TAIWA
14. B. E. Brodsky and B. S. Darkhovsky., Nonparametric Methods in Change-point Problems, Kluwer Academic Publishers, 1993.
15. J. Kang, Z. Zhang, and J. B. Ju, "Protect E-commerce against DDoS Attacks with Improved D-WARD Detection System", IEEE International Conference on e-Technology, e-Commerce and e-Service, March 2005.
16. H. Wang, D. Zhang, and K. G. Shin. "Detecting SYN flooding attacks", In Proceedings of IEEE Infocom 2002, June 2002.
17. S. Floyd and V. Jacobson, "Link-Sharing and resource management models for packet networks", IEEE/ACM Transactions on Networking, August 1995.
18. K. J. Loh, I. Gui and K. C. Chua, "Performance of a Linux Implementation of Class Based Queueing", Computer Communications and Networks Proceeding, October 1998.
19. Linux Kernel, "The Linux Kernel Archives", http://www.kernel. org/.
20. G. Foundation,"Gentoo Linux", http:// www. gentoo.org/main/en/ about.xml.
21. Snort, "the de facto standard for intrusion detection- prevention", http://www.snort.org/
22. N K. Thompson, G. J. Miller, and R. Wilder, "Wide-Area Internet Traffic Patterns and Characteristics". IEEE Network, Vol. II, No. 6, November December 1997.