An early stage detecting method against SYN flooding attack

Proceedings - International Symposium on Computer Science and Its Applications, CSA 2008

Volumn , Issue , 2008, Pages 263-268

  Guiyi, Wei ^a   Ye, Gu ^a   Yun, Ling ^a  

^a ZHEJIANG GONGSHANG UNIVERSITY   (China)

Author keywords

DDoS; Detecting method; Early stage; SYN flooding

Indexed keywords

CHEMICAL SHIFT; COMPUTER SCIENCE; COMPUTERS; ELECTRIC CURRENTS; INTERNET; MAGNETIC ANISOTROPY; TRANSMISSION CONTROL PROTOCOL;

CONNECTION REQUESTS; DDOS; DDOS ATTACKS; DEFENSE MECHANISMS; DETECTING METHOD; DETECTING METHODS; EARLY STAGE; EARLY STAGES; EDGE ROUTERS; INTERNET SECURITIES; IP ADDRESSES; SYN FLOODING; SYN FLOODING ATTACKS; TCP CONNECTIONS;

INTERNET PROTOCOLS;

EID: 56649089980     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSA.2008.18     Document Type: Conference Paper

References (16)

1. H. Wang, D. Zhang, K.G. Shin, "Detecting SYN flooding attacks", Proceedings of the Annual Joint Conference of the IEEE Computer Society and Communications Society ( INFOCOM'02), New York, USA, 2002, pp. 1530-1539.
2. C. Jin, H.N. Wang, K.G. Shin, "Hop-count filtering: An effective defense against spoofed DDoS traffic", Proceedings of the 10th ACM Conference on Computer and Communication Security (CCS'03). Washington, DC, USA, 2003, pp. 30-41.
3. J. Lemon, "Resisting SYN flood DoS attacks with a SYN cache", Proceedings of the BSDCon 2002, San Francisco, CA, USA, 2002, pp. 89-97.
4. T. Peng, C. Leckie, and R. Kotagiri, "Protection from distributed denial of service attack using history-based IP filtering", Proceedings of IEEE International Conference on Communications 2003(Anchorage, Alaska, USA, May 11-15 2003), pp. 482-486.
5. B. Xiao, W. Chen, Y.X. He, H.M. Edwin Sha, "An Active Detecting Method Against SYN Flooding Attack", Proceedings of the 11th International Conference on Parallel and Distributed Systems (ICPADS'05),( Fukuoka, Japan,20-22 July 2005), pp. 709-715.
6. J. Mirkovic and G. Prier, "Attacking DDoS at the source", Proceedings of the 10th IEEE International Conference on Network Protocols, Paris, France, 2002, pp. 312-321.
7. P. Ferguson and D. Senie, "Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing", Internet best current practice RFC 2827, May 2000.
8. S. Branigan, H. Burch, B. Cheswick, and F. Wojcik, "What can you do with Tracerouter?", IEEE Internet Computing, Vol.5, Issue 5, 2001, pp. 96.
9. J. Ioannidis and S.M. Bellovin, "Implementing pushback: Routerbased defense against DDoS attacks", Proceedings of the Network and Distributed System Security Symposium (NDSS'02), (San Diego, California, USA, 6-8 February 2002), The Internet Society, 2002.
10. B. Xiao, W. Chen, Y.X. He, "A Novel Technique for Detecting DDoS Attacks at the Early Stage", Journal of Supercomputing, Vol. 36, 2006, pp. 235-248.
11. Y.X. He, W. Chen and B. Xiao, "Detecting SYN Flooding Attacks Near Innocent Side", Proceedings of the International Conference on Mobile Ad-hoc and Sensor Networks (MSN 2005), 2005, pp. 443-452.
12. B. Xiao, W. Chen, and Y.X. He, "An Autonomous Defense against SYN Flooding Attacks: Detect and Throttle Attacks at the Victim Side", Journal of Parallel and Distributed Computing (JPDC - Elsevier), Vol. 68, Issue 4, 2008, pp. 456-470.
13. M. Kalantari, K. Gallicchio, and M. Shayman, "Using transient behavior of TCP in mitigation of distributed denial of service attacks", Proceedings of the 41st IEEE Conference on Decision and Control, 10-13 Dec. 2002, pp. 1422-1427.
14. H. Wang, D. Zhang, and G. Shin, "SYN-dog: sniffing SYN flooding source", Proceedings of the 22nd International Conference on Distributed Computing Systems (ICDCS'02), July 2002, pp. 421-429.
15. S.C. Rhea and J. Kubiatowicz, "Probabilistic location and routing", Proceedings of the IEEE INFOCOM 2002, 2002, pp. 1248-1257.
16. A. Yaar, A. Perrig, D. Song, "SIFF: A stateless internet flow filter to mitigate DDoS flooding attacks", Proceedings of the IEEE Symposium on Security and Privacy, (Silver Spring, MD, 2004), IEEE Computer Society, 2004, pp. 130-143.