Anti-DDoS Virtualized Operating System

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 667-674

  Garg, Sanjam ^a   Saran, Huzur ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY DELHI   (India)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK TRAFFIC; DDOS ATTACKS; EDGE-ROUTERS; EFFICIENT IMPLEMENTATION; INTERNATIONAL CONFERENCES; MALICIOUS TRAFFIC; NETWORK THROUGHPUT; OPERATING SYSTEMS; PACKET FILTERING; TRAFFIC CHARACTERIZATION; VIRTUALIZATION;

COMPUTER SYSTEMS; ENERGY MANAGEMENT; RELIABILITY;

COMPUTER OPERATING SYSTEMS;

EID: 49049106371     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.120     Document Type: Conference Paper

References (22)

1. C. Brenton, "What is Egress Filtering and How can I Implement it?" Feb 2000, the SANS Institute. [Online], Available: http: //www.sans.org/rr/paper.php?id=1059
2. B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, I. Pratt, A. Warfield, P. Barham, and R. Neugebauer, "Xen and the art of virtualization," in Proceedings of the ACM Symposium on Operating Systems Principles, October 2003, [Online], Available: citeseer.ist.psu.edu/dragovic03xen.html
3. "Xensource," http://www.xensource.com/products/xen/.
4. C. Kreibich, A. Warfield, J. Crowcroft, S. Hand, and I. Pratt, "Using packet symmetry to curtail malicious traffic," Proc. ACM HotNets 2005.
5. "Vmware," http://www.vmware.com/.
6. "Virtual Server," http://www.microsoft.com/servers/default. mspx.
7. A. Whitaker, M. Shaw, and S. D. Gribble, "Scale and performance in the denali isolation kernel," SIGOPS Oper. Syst. Rev., vol. 36, no. SI, pp. 195-209, 2002. [Online]. Available: http://portal.acm.org/citation. cfm?id=844147
8. J. Dike, "A user-mode port of the Linux kernel," 2000. [Online]. Available: http://www.usenix.org/publications/library/Proceedings/ als2000/dike.html
9. C. Douligeris and A. Mitrokotsa, "DDoS attacks and defense mechanisms: classification and state-of-the-art," vol. 44, no. 5, pp. 643-666, Apr. 2004.
10. T. M. Gil and M. Poletto, "MULTOPS: A Data-Structure for bandwidth attack detection," pp. 23-38. [Online]. Available: citeseer.ist.psu.edu/ gi101multops.html
11. J. Mirkovic, "D-WARD: Source-end defense against distributed denial-of-service attacks," Ph.D. dissertation. [Online]. Available: citeseer.ist.psu.edu/mirkovic03dward.htinl
12. C. L. Schuba, I. V. Krsul, M. G. Kuhn, E. H. Spafford, A. Sundaram, and D. Zamboni, "Analysis of a denial of service attack on TCP," in Proceedings of the 1997 IEEE Symposium on Security and Privacy, IEEE Computer Society. IEEE Computer Society Press, May 1997, pp. 208-223. [Online]. Available: citeseer.ist.psu.edu/article/schuba97analysis.html
13. "CHECKPOINT INC. 1996. TCP SYN flooding attack and the firewall-1 SYNDefender. Checkpoint Inc.."
14. T. Garfinkel and M. Rosenblum, "A virtual machine introspection based architecture for intrusion detection," in Proc. Network and Distributed Systems Security Symposium, February 2003.
15. "Xen networking," http://wiki.xensource.com/xenwiki/ XenNetworking.
16. R. Prasad, M. Murray, C. Dovrolis, and K. Claffy, "Bandwidth estimation: Metrics, measurement techniques, and tools," 2003. [Online]. Available: citeseer.ist.psu.edu/prasadO3bandwidth.html
17. A. Menon, A. L. Cox, and W. Zwaenepoel, "Optimizing network virtualization in xen," in USENIX Annual Technical Conference, May 2006, pp. 15-28.
18. H. Chen, R. Chen, F. Zhang, B. Zang, and P.-C. Yew, "Live updating operating systems using virtualization," in VEE '06: Proceedings of the 2nd international conference on Virtual execution environments. New York, NY, USA: ACM Press, 2006, pp. 35-44.
19. A. Cunei and J. Vitek, "A new approach to real-time checkpointing," in VEE '06: Proceedings of the 2nd international conference on Virtual execution environments. New York, NY, USA: ACM Press, 2006, pp. 68-77.
20. G. W. Dunlap, S. T. King, S. Cinar, M. A. Basrai, and P. M. Chen, "Revirt: enabling intrusion analysis through virtual-machine logging and replay," SIGOPS Oper. Syst. Rev., vol. 36, no. SI, pp. 211-224, 2002. [Online]. Available: http://portal.acm.org/citation.cfm?id=844148
21. W. Hu, J. Hiser, D. Williams, A. Filipi, J. W. Davidson, D. Evans, J. C. Knight, A. Nguyen-Tuong, and J. Rowanhill, "Secure and practical defense against code-injection attacks using software dynamic translation," in VEE '06: Proceedings of the 2nd international conference on Virtual execution environments. New York, NY, USA: ACM Press, 2006, pp. 2-12.
22. T. Garfinkel, M. Rosenblum, and D. Boneh, "Flexible os support and applications for trusted computing," in Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HotOS-VIII), May 2003. [Online]. Available: citeseer.ist.psu.edu/garfinke103flexible.html