A distributed defense framework for flooding-based DDoS attacks

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 245-252

  You, Yonghua ^a   Zulkernine, Mohammad ^a   Haque, Anwar ^b  

^a QUEEN S UNIVERSITY   (Canada)

^b IP/BB Planning   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

CONTROL SYSTEMS; HIERARCHICAL SYSTEMS; LAW ENFORCEMENT; MECHANISMS; QUALITY OF SERVICE; SECURITY OF DATA; WEIGHT CONTROL;

ATTACK TRAFFIC; CONGESTION CONTROL; DDOS ATTACKS; DDOS DEFENSE; DEFENSE SYSTEMS; DISTANCE-BASED; DISTRIBUTED DEFENSE; DISTRIBUTED DENIAL-OF-SERVICE ATTACKS; DISTRIBUTED FRAMEWORKS; EDGE ROUTERS; EFFECTIVELY CONTROL; INTERNATIONAL CONFERENCES; PUSH BACK; RATE LIMITS; SERVICE QUALITY; TRACE BACK;

QUALITY CONTROL;

EID: 49049110543     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.69     Document Type: Conference Paper

References (18)

1. Y. You, M. Zulkernine, and A. Haque, "Detecting flooding-based DDoS attacks," Proc. of the IEEE International Conference on Communications, Glasgow, Scotland, June 2007, pp. 1229-1234.
2. th Annual Joint. Conf. of the IEEE Computer & Communications Societies, Miami, Florida, USA, March 2005, pp. 1395-1406.
3. S. Tanachaiwiwat and K. Hwang, "Differential packet filtering against DDoS flood attacks," in Proc. of ACM Conf. on Computer and Comm. Security (CCS), October 2003.
4. th Annual Joint Conf. of the IEEE Computer and Communications Societies, Miami, Florida, USA, vol. 2, 2005, pp. 1373-1383.
5. D. K. Y. Yau, J. C. S. Lui, F. Liang, and Y. Yam, "Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles." IEEE/ACM Trans. on Networking, vol. 13, no. 1, Feb. 2005, pp. 29-42.
6. Y. Kim, J.-Y. Jo, F. Merat, M. Yang, and Y. Jiang, "Mitigating Distributed Denial-of-Service attack with deterministic bit marking," International Journal of Information Technology, vol. 11, no. 2, 2005, pp. 62-82
7. J. Mirkovic and P. Reiher, "D-WARD: a source-end defense against flooding Denial-of-Service attacks," IEEE Transactions Dependable and Secure Computing, vol. 2, no. 3, July 2005, pp. 216-232.
8. Y. Xiang, W. Zhou, and M. Chowdhury, "A survey of active and passive defense mechanisms against DDoS attacks," Technical Report C04/02, School of Information Technology, Deakin University, Australia, March 2004.
9. Y. Jing, Z. Xiao, X. Wang, and G. Zhang, "02-DN: an overlay-based distributed rate limit framework to defeat DDoS attacks," Proc. of International Conference on Networking, International Conference on Systems and International Conference on Mobile Communications and Learning Technologies (ICN/ICONS/MCL), Mauritius, 2006.
10. H.-Y. Lam, C.-P. Li, S.-T. Chanson, and D.-Y. Yeung, "A coordinated detection and response scheme for distributed Denial-of-Service attacks," Proc. of the IEEE Conference on Communications, Istanbul, Turkey, June 2006, pp. 2165-2170.
11. J. Mirkovic, M. Robinson, P. Reiher, and G. Oikonomou, "A framework for collaborative DDoS defense," Proceedings of the 22nd Annual Computer Security Applications Conference, Miami, Florida, USA, December 2006, pp. 33-42.
12. R. Mahajan, S. M. Bellovin, S. Floyd, J. Inannidis, V. Paxson, and S. Shenker, "Controlling high bandwidth aggregates in the network," Technical Report, AT & T Center for Internet Research at ICSI, July 2001.
13. Y. Fan, H.S. Hassanein, and P. Martin, "Proactive Control of Distributed Denial of Service Attacks with Source Router Preferential Dropping," ACS/IEEE International Conference on Computer Systems and Applications (AICCSA), Cairo, Egypt, January 2005, pp. 70-77.
14. Topology Project University of Michigan, "Inet: Internet Topology Generator," Available at topology.eecs.umich.edu/inet/, 2006.
15. J. Kong, M. Mirza, J. Shu, C. Yoedhana, M. Gerla, and S. Lu, "Random flow network modeling and simulations for DDoS attack mitigation," Communications, vol. 1, May 2003, pp. 487-491.
16. VINT Project U. C. Berkeley, "NS2: network simulator," Available at http://www.isi.edu/nsnam/ns, 2006.
17. C. Ko, A. Hussain, S. Schwab, R. Thomas, and B. Wilson, "Towards systematic IDS evaluation," Proc. of DETER Community Workshop, Arlington, Virginia, USA, June 2006, pp. 20-23.
18. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hussain, and R Govinda, "COSSACK: Coordinated suppression of simultaneous attacks," Proc. of the DARPA Information Survivability Conf. and Exposition III, Washington DC, USA Apr. 2003, pp. 2-13.