A two-level source address spoofing prevention based on automatic signature and verification mechanism

Proceedings - IEEE Symposium on Computers and Communications

Volumn , Issue , 2008, Pages 392-397

  Shen, Yan ^a   Bi, Jun ^a   Wu, Jianping ^a   Liu, Qiang ^a  

^a TSINGHUA UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET PROTOCOLS; TELECOMMUNICATION SYSTEMS;

AND VERIFICATIONS; AUTONOMOUS SYSTEMS; END SYSTEMS; INCREMENTAL DEPLOYMENTS; IP ADDRESSES; IP SPOOFING; MANAGEMENT COSTS; PEER TO PEERS; REPLAY ATTACKS; SOURCE ADDRESSES; SPOOFING PREVENTIONS;

GATEWAYS (COMPUTER NETWORKS);

EID: 55849088770     PISSN: 15301346     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISCC.2008.4625684     Document Type: Conference Paper

References (27)

1. US-CERT report, "The Continuing Denial of Service Threat Posed by DNS Recursion", 2006.
2. SSAC Advisory SAC008, "DNS Distributed Denial of Service (DDOS) Attacks", 2006.
3. CERT Advisory CA-98.01. "Smurf IP denial-of-service attacks", 1998, http://www.cert.org/advisories/CA-98-01.html
4. CERT Advisory CA-96.21. "TCP SYN flooding and IP spoofing", 2000, http://www.cert.org/advisories/CA-96-21.html
5. D. Moore, G. Voelker and S. Savage, "Inferring internet Denial-of-Service activity", in Proc. USENIX Security Symposium, 2001.
6. http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3 750/index.htm
7. P. Ferguson and D. Senie, "Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing", 2000, RFC 2827.
8. Cisco IOS, "Unicast reverse path forwarding", 1999.
9. A. Bremler-Barr and H. Levy, "Spoofing Prevention Method", in Proceedings of IEEE INFOCOMM 2005.
10. C. Jin, H. Wang, and K.G. Shin, Hop-count filtering, "An effective defense against spoofed DDoS traffic", in Proceedings of ACM CCS 2003.
11. S. Kent, "IP Authentication Header, RFC 4302", 2005.
12. L.Z. Xie, J. Bi, J.P. Wu, "An Authentication Based Source Address Spoofing Prevention Method Deployed in IPv6 Edge Network", Lecture Notes in Computer Science, Vol. 4490, pp801-808, 2007.
13. Daw, X. Song and A. Perrig, "Advanced and authenticated marking schemes for IP traceback", in Proceedings IEEE INFOCOMM 2001.
14. K. Park and H. Lee, "On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack", Tech. Rep. CSD-00-013, Department of Computer Sciences, Purdue University, 2000.
15. M. Adler, "Tradeoffs in probabilistic packet marking for IP traceback", in Proceedings of 34th ACM Symposium on Theory of Computing (STOC), 2002.
16. Belenky and Ansari, "On IP Traceback. IEEE Communications Magazine", Volume 41, Issue 7, July 2003.
17. S. Bellovin, M. Leech, and T. Taylor, "Icmp traceback messages", IETF draft, 2003.
18. A. Snoeren, C. Partridge, L. Sanchez, C. Jones, F. Tchakountio, B. Schwartz, S. Kent, and W. Strayer, "Singlepacket IP traceback". ACM/IEEE Transactions on Networking, Dec. 2002.
19. W.T. Strayer, C.E. Jones, F. Tchakountio, and R.R. Hain, "SPIE-IPv6: Single IPv6 Packet Traceback", IEEE Conference on Local Computer Network 2004.
20. X. Liu, X.W. Yang, D. Wetherall, and T. Anderson, "Efficient and Secure Source Authentication with Packet Passports", 2nd USENIX Steps to Reduce Unwanted Traffic on the Internet workshop (SRUTI 2006), pp7-13, San Jose, CA, July 2006.
21. H.Y. Chun, M. Jakobsson, A. Perrig, "Efficient Constructions for One-way Hash Chains", 2003, CMU-CS-03-220.
22. Y. Shen, J. Bi, J.P. Wu, Q. Liu, "The Automatic Peer-to-Peer Anti-Spoofing Method", Lecture Notes in Artificial Intelligence, Vol. 4692, pp855-863, 2007.
23. G. Marsaglia, "The KISS generator", http://oldmill.uchicago. edu/~wilder/Code/random/Papers/Ma rsaglia_2003.html.
24. Matsumoto and Nishimura, "Mersenne twister: A 623-dimensionally equi distributed uniform pseudo-random number generator", ACM Trans. Model. Comput. Simul. Vol. 8, No. 1, 3-30, 1998.
25. M.J.B. Robshaw, "Stream Ciphers", RSA Laboratories Technical Report TR-701, July 23, 1995.
26. Baptista M.S. "Cryptography with chaos" [J]. Physics Letters A, 1998, 50-54.
27. L. Fan, P. Cao, J. Almeida, and A. Z. Broder. "Summary cache: A scalable wide-area web cache sharing protocol". Technical Report 1361, Department of Computer Science, University of Wisconsin-Madison, 1998.