Evaluating the vulnerability of network mechanisms to sophisticated DDoS attacks

Proceedings - IEEE INFOCOM

Volumn , Issue , 2008, Pages 266-270

  Ben Porat, Udi ^a   Bremler Barr, Anat ^b   Levy, Hanoch ^a,c  

^a TEL AVIV UNIVERSITY   (Israel)

^b INTERDISCIPLINARY CENTER   (Israel)

^c ETH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNICATION SYSTEMS; COMPUTER NETWORKS; DATA STRUCTURES; FILE ORGANIZATION; MECHANISMS;

COMPUTER COMMUNICATIONS; DDOS ATTACKS; MALICIOUS USERS;

COMPUTER SYSTEMS;

EID: 51449088190     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2007.298     Document Type: Conference Paper

References (15)

1. S. A. Crosby and D. S. Wallach, "Denial of service via algorithmic complexity attacks,' in Usenix Security, 2003.
2. A. Bremler-Barr, H. Levy, and N. Halachmi, "Aggressiveness protective fair queueing for bursty applications (short paper)," in IWQoS, 2006.
3. M. Guirguis, A. Bestavros, and I. Matta, "Exploiting the transients of adaptation for RoQ attacks on internet resources," in ICNP, 2004.
4. M. Guirguis, A. Bestavros, I. Matta, and Y. Zhang, "Reduction of quality (roq) attacks on internet end-systems," in INFOCOM, 2005.
5. A. Kuzmanovic and E. W. Knightly, "Low-rate tcp-targeted denial of service attacks (the shrew vs. the mice and elephants)," in ACM SIGCOMM, 2003.
6. I. M. M. Guirguism, A. Bestavros and Z. Y, "Reduction of quality (roq) attacks on dynamic load balancers: Vulnerability assessment and design tradeoffs," in Inforom, 2007.
7. R. Smith, C. Estan, and S. Jha, "Backtracking algorithmic complexity attacks against a nids," in Annual Computer Security Applications Conference December, 2006.
8. S. Lippman and S. Stidham, "Individual versus social optimization in exponential congestion systems," Operations Research, vol. 25, pp. 233-247, 1997.
9. S. A. Crosby and D. S. Wallach, "Denial of service via algorithmic complexity attacks." http://www.cs.rice.edu/scrosby/hash/.
10. M. D. McIlroy, "A killer adversary for quicksort," Software-Practice and Experience, pp. 341-344, 1999.
11. T. Peters, 2003. http://mail.python.org/pipermail/python-dev/2003-May/ 035916.html.
12. M. Fisk and G. Varghese, "Fast content-based packet handling for intrusion detectin." UCSD TR CS2001-0670.
13. F. Weimer, "Algorithmic complexity attacks and the linux networking code." http://www.enyo.de/fw/security/notes/linux-dst-cache-dos.html.
14. U. Ben-Porat, A. Bremler-Barr, and H. Levy, "Evaluating the vulnerability of network mechanisms to sophisticated ddos attacks," 2007. http://www.faculty.idc.ac.il/bremler/.
15. T. H. Cormen, C. E. Leiserson, R. L. Rivest, and C. Stein, Introduction to Algorithms (Second Edition). MIT Press and McGraw-Hill, 2001.