Evaluating the partial deployment of an AS-level IP traceback system

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2008, Pages 2069-2073

  Castelucio, André O ^a   Salles, Ronaldo M ^a   Ziviani, Artur ^b  

^a MILITARY INSTITUTE OF ENGINEERING   (Brazil)

^b LABORATÓRIO NACIONAL DE COMPUTAÇÃO CIENTÍFICA   (Brazil)

Author keywords

AS level packet traceback; Denial of service; IP traceback

Indexed keywords

DECODING; ELECTRIC NETWORK TOPOLOGY; INTERNET; INTERNET PROTOCOLS; NETWORK SECURITY; SECURITY OF DATA; TRANSMISSION CONTROL PROTOCOL;

AS-LEVEL PACKET TRACEBACK; AUTONOMOUS SYSTEMS; DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICES; INCREMENTAL DEPLOYMENTS; INTERNET SERVICES; IP TRACEBACK; NETWORK TOPOLOGIES; STRATEGIC PLACEMENTS; TRACEBACK SYSTEMS;

HIERARCHICAL SYSTEMS;

EID: 56749139636     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1363686.1364186     Document Type: Conference Paper

References (27)

1. Network simulator, http://www.isi.edu/nsnam/ns.
2. S. Agarwal and T. G. Griffin. BGP Proxy Community Community. IETF Internet Draft, January 2004.
3. R. Albert and A.-L. Barabasi. Topology of evolving networks: local events and universality. Physical Review Letters, 85:5234, 2000.
4. H. Aljifri, TP traceback: A new denial-of-service deterrent? IEEE Security and Privacy, 1(3):24-31, 2003.
5. A. Belenky and N. Ansari. On IP traceback. IEEE Communications Magazine, 41(7), jul 2003.
6. S. Bellovin, M. Leech, and T. Taylor. ICMP Traceback messages. IETF Internet Draft, February 2003.
7. B. Bloom. Space/time tradeoffs in hash coding with allowable errors. Communications of the ACM, 13(7):422-426, 1970.
8. CERT - Computer Emergency Response Team. CERT Advisory CA-1996-21 TCP SYN flooding and IP spoofing attacks. Technical report, CERT, 1996.
9. R. Chandra, P. Traina, and T. Li. BGP Communities Attribute, Aug. 1996.
10. E. Chen and T. Bates. An Application of the BGP Community Attribute in Multi-home Routing, Aug. 1990.
11. Computer Emergency Response Team. CSI/PBI - Computer Crime and Security Survey. Computer Security Institute, 2006.
12. X. Uiraitropoulos, P. Verkaik, and G. Riley. BGP++ http://www.ece. gatech.edu/research/labs/MANIACS/BGP++, 2006.
13. A. Durresi, V. Paruemiri, L. Barolli, R. Kannan, and S. S. Iyengar. Efficient and secure autonomous system based traceback. Journal of Interconnection Networks, 5(2):151-164, 2004.
14. M. Faloutsos, P. Paloutsos, and C. Faloutsos. On power-law relationships of the internet topology. In SIGCOMM '99: Proceedings of the conference on Applications, technologies, architectures, and protocols for computer communication, pages 251-262, New York, NY, USA, 1999. ACM Press.
15. G. Huston. NOPEER Community for Border Gateway Protocol (BGP) Roule Scope Control, Apr. 2004.
16. Internet Security Systems. Distributed denial of service attack tools. Technical report, ISS, 2000.
17. T. Korkmaz, C. Gong, K. Sarac, and S. Dykes. Single packet IP traceback in AS-level partial deployment scenario. International Journal of Security and Networks, 2(1/2):95-108, 2007.
18. B. Krishnamurthy. Mohonk: mobile honeypots to trace unwanted traffic early. In NetT '04: Proceedings of the ACM SIGCOMM workshop on Network troubleshooting, pages 277-282, New York, NY, USA, 2004. ACM Press.
19. R. P. Lauter, P. B. Velloso, D. de O. Cunha, I. M. Moraes, M. D. D. Bicudo, M. D. D. Moreira, and O. C. M. B. Duarte. Towards stateless single-packet IP traceback. In Send IEEE Conference on Local Computer Networks - LCN'2007, Dublin, Ireland, October 2007.
20. R. P. Laufer, P. B. Velloso, and O. C. M. B. Duarte. Generalized bloom filters, gtar05-43. Technical report, COPPE/UFRJ, September 2005.
21. D. Magoni. Network manipulator. https://dpt-info.u-strasbg.fr/magoni/ nem, 2002.
22. A. Medina, T. Matta, and J. Byers. On the origin of power laws in internet topologies. SIGCOMM Comput Commun. Rev., 30(2):18-28, 2000.
23. J. Mirkovic and P. Reiher. A taxonomy of DDoS attack and DDoS defense mechanisms. SIGCOMM Comput. Commun. Rev., 34(2):39-53, 2004.
24. D. Moore, C. Shannon, D. J. Brown, G. M. Voelker, and S. Savage. Inferring internet denial-of-service activity. ACM Trans. Comput Syst., 24(2):115-139, 2006.
25. E. Rosen and Y. Rekhter. BGP/MPLS IP Virtual Private Networks (VPNs), Feb. 2006. Updated by RFCs 4577, 4684.
26. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proceedings of the 2000 conference on Applications, technologies, architectures, and protocols for computer communications (SIGCOMM), pages 295-306, Stockholm, Sweden, August 2000.
27. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, B. Schwartz, S. T. Kent, and W. T. Strayer. Single-packet IP traceback. IEEE/ACM Trans. Netw., 10(6):721-734, dec 2002.