An IP traceback mechanism for reflective DoS attacks

Canadian Conference on Electrical and Computer Engineering

Volumn 2, Issue , 2004, Pages 0901-0904

  Wang, Bao Tung ^a   Schulzrinne, Henning ^a  

^a Department of Earth and Environmental Sciences   (United States)

Author keywords

Denial of service (DoS) attack; Distributed DoS (DDoS) attack; IP traceback; Reflective DDoS (RDoS) attack

Indexed keywords

DENIAL-OF-SERVICE (DOS) ATTACKS; IP TRACKBACK; REFLECTIVE DDOS (RDOS) ATTACK;

BANDWIDTH; DATA PROCESSING; MATHEMATICAL MODELS; MULTICASTING; PACKET NETWORKS; SYNCHRONIZATION; TELECOMMUNICATION NETWORKS;

NETWORK PROTOCOLS;

EID: 5044235325     PISSN: 08407789     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. S. Savage, David Wetherall, Anna Karlin and Tom Anderson, "Network Support for BP Traceback," IEEE/ACM Trans. on Networking, June 2001.
2. D.X. Song, A. Perrig, "Advanced and authenticated marking schemes for IP traceback," Proc. IEEE INFOCOM, 2001.
3. A.C. Snoeren, C. Partridge, L.A. Sanchez, C.E. Jones, F. Tchakountio, S.T. Kent, W.T. Strayer. "Single-packet IP traceback," IEEE/ACM Trans. on Networking, Dec 2002.
4. R. Stone. "CenterTrack: An IP Overlay Network for Tracking DoS Floods," Proc. USENIX Security Symposium, Jul. 2000.
5. S.M. Bellovin. "ICMP traceback messages", Internet draft ftp://ftp.ietf.org/internet-drafts/draft-ietf-itrace-04.txt. Feb. 2003.
6. S.F. Wu, L. Zhang, D. Massey, A. Mankin. "On design and evaluation of "intention-driven ICMP traceback," Proc. Computer Communications and Networks, 2001.
7. H. Burch and B. Cheswick. "Tracing Anonymous Packets to Their Approximate Source," Proc. LISA, Dec. 2000.
8. B. Wang, H. Schulzrinne, "Multifunctional ICMP Messages for e-Commerce", Proc. IEEE EEE, Mar. 2004.
9. B. Wang, H. Schulzrinne, "A Robust Packet Filtering Method for High Bandwidth Aggregates," IEEE CCECE, May 2004.
10. D. Dean, M. Franklin, A. Stubblefield, "An algebraic approach to IP traceback," ACM TISSEC, 5(2), May 2002.
11. V. Paxson, "An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks," Computer Communication Review 31(3), July 2001.
12. A.Yaar, A. Perrig, D. Song, "Pi: A Path Identification Mechanism to Defend against DDoS Attacks," Proc. IEEE SP 2003.
13. B. Wang, H. Schulzrinne, "Detecting Offensive Routers: A Straightforward Approach," Proc. IEEE ICCST, 2003.