Adaptive selective verification

Proceedings - IEEE INFOCOM

Volumn , Issue , 2008, Pages 1202-1210

  Khanna, Sanjeev ^a   Venkatesh, Santosh S ^a   Fatemieh, Omid ^b   Khan, Fariba ^b   Gunter, Carl A ^b  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

^b UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLIENT REQUESTS; COMPUTER COMMUNICATIONS; INFOCOM;

TELECOMMUNICATION SYSTEMS;

EID: 51349132481     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2007.101     Document Type: Conference Paper

References (27)

1. CERT CC. smurf attack, http://www.cert.org/advisories/ca-1998-01.html.
2. Two root servers targeted by botnet. PC Advisor (pcadvisor.co.uk), 02/07/2007.
3. Phish fighters floored by DDoS assault. The Register (theregister.co.uk), 02/20/2007.
4. Surge in hijacked PC networks. BBC (bbc.co.uk), 03/19/2007.
5. Telegraph floored by DDoS attack. The Register (theregister.co.uk), 05/22/2007.
6. FBI busts alleged DDoS mafia. Security Focus (securityfocus.com). 08/26/2004.
7. M. Abadi, M. Burrows, M. Manasse, and T. Wobber. Moderately hard, memory-bound functions. ACM Trans. Inter. Tech., 5(2):299-327, 2005.
8. I. R. C. T. Fan, M. E. Muller. Development of sampling plans by using sequential (item by item) selection techniques and digital computers. J. Amer. Statist. Assoc., 57:387-402, 1962.
9. C. Dwork, A. Goldberg, and M. Naor. On memory-bound functions for fighting spam, 2003.
10. D. Eastlake, RFC: 2535, Domain Name System Security Extensions.
11. C. A. Gunter, S. Khanna, K. Tan, and S. S. Venkatesh. DoS protection for reliably authenticated broadcast. In NDSS'04: Network and Distributed System Security Symposium. The Internet Society, 2004.
12. C. Jin, H. Wang, and K. G. Shin. Hop-count filtering: an effective defense against spoofed DDoS traffic. In CCS '03: Proceedings of the 10th ACM conference on Computer and communications security, pages 30-41, New York, NY, USA, 2003, ACM Press.
13. E. C. Kaufman, RFC: 4306, Internet Key Exchange (IKEv2) Protocol.
14. R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling high bandwidth aggregates in the network. SIGCOMM Comput. Commun. Rev., 32(3):62-73, 2002.
15. D. Mankins, R. Krishnan, C. Boyd, J. Zao, and M. Frentz. Mitigating distributed denial of service attacks with dynamic resource pricing. In ACSAC '01: Proceedings of the 17th Annual Computer Security Applications Conference, page 411, Washington, DC, USA, 2001. IEEE Computer Society.
16. D. Moore, C. Shannon, D. J. Brown, G. M. Voelker, and S. Savage. Inferring internet denial-of-service activity. ACM Trans. Comput. Syst., 24(2):115-139, 2006.
17. G. Oikonomou, J. Mirkovic, P. Reiher, and M. Robinson. A framework for a collaborative DDoS defense. In ACSAC '06: Proceedings of the 22nd Annual Computer Security Applications Conference on Annual Computer Security Applications Conference, pages 33-42, Washington, DC, USA, 2006. IEEE Computer Society.
18. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In SIGCOMM '00: Proceedings of the conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, pages 295-306, New York, NY, USA. 2000, ACM Press.
19. M. Sherr, M. B. Greenwald, C. A. Gunter, S. Khanna, and S. S. Venkatesh. Mitigating DoS attacks through selective bin verification. In IEEE ICNP Workshop on Secure Network Protocols (NPSec), pages 7-12, 2005.
20. D. X. Song and A. Perrig. Advanced and authenticated marking schemes for IP traceback. In INFOCOM '01: Proceedings of the Joint Conference of the IEEE Computer and Communications Societies. IEEE Press, 2001.
21. M. Srivatsa, A. Iyengar, J. Yin, and L. Liu. A middleware system for protecting against application level denial of service attacks. In Middleware, pages 260-280, 2006.
22. M. Walfish, M. Vutukuru, H. Balakrishnan, D. Karger, and S. Shenker. DDoS defense by offense. In SIGCOMM '06: Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications, pages 303-314, New York, NY, USA, 2006, ACM Press.
23. X. Wang and M. K. Reiter. Defending against denial-of-service attacks with puzzle auctions. In SP '03: Proceedings of the 2003 IEEE Symposium on Security and Privacy, page 78, Washington, DC, USA, 2003, IEEE Computer Society.
24. A. Yaar, A. Perrig, and D. X. Song, SIFF: A stateless internet flow filter to mitigate DDoS flooding attacks. In IEEE Symposium on Security and Privacy, pages 130-, 2004.
25. X. Yang, D. Wetherall, and T. Anderson. A DoS-limiting network architecture. In SIGCOMM '05: Proceedings of the 2005 conference on Applications, technologies, aichitectures, and protocols for computer communications, pages 241-252, New York, NY, USA, 2005, ACM Press.
26. D. K. Y. Yau, J. C. S. Lui, F. Liang, and Y. Yam. Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles. IEEE/ACM Trans. Netw., 13(1):29-42, 2005.
27. C. C. Zou. N. Duffield, D. Towsley, and W. Gong. Adaptive defense against various network attacks. In IEEE Journal on Selected Areas in Communications, volume 24, pages 1877-1888, IEEE Press, 2006.