Building accountability into the future internet

4th IEEE Workshop on Secure Network Protocols, NPSec'08

Volumn , Issue , 2008, Pages 45-51

  Mirkovic, Jelena ^a   Reiher, Peter ^b  

^a UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; DISTRIBUTED COMPUTER SYSTEMS; INTERNET; NETWORK ARCHITECTURE; NETWORK PROTOCOLS; NETWORK SECURITY; SERVERS; TECHNICAL PRESENTATIONS; TELECOMMUNICATION NETWORKS;

ARCHITECTURAL LAYERS; INTERNET ARCHITECTURES; IP SPOOFING; MALICIOUS BEHAVIORS; REPUTATION SYSTEMS; SECOND LAYERS; SERVICE ATTACKS; WORM INFECTIONS;

INTERNET PROTOCOLS;

EID: 58049206564     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NPSEC.2008.4664880     Document Type: Conference Paper

References (27)

1. Advanced Network Architecture Group. ANA Spoofer Project. http://spoofer.csail.mit.edu/.
2. A. Yaar, A. Perrig, and D. Song. SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks. In IEEE Symposium on Security and Privacy, 2004.
3. X. Yang, D. Wetherall, and T. Anderson. A DoS-limiting network architecture. In ACM SIGCOMM, 2005.
4. V. Yegneswaran, P. Barford, and S. Jha. Global Intrusion Detection in the DOMINO Overlay System. Proc. the Network and Distributed Security Symposium (NDSS) 2004.
5. D. Dagon, G. Gu, C. Zou, J. Grizzard, S. Dwivedi, W. Lee, and R. Lipton. A Taxonomy of Botnets. Unpublished paper, May 2005.
6. P. Barford and V. Yegneswaran. An Inside Look at Botnets. Special Workshop on Malwar Detection, Advances in Information Security, Springer Verlag, 2006.
7. D Andersen, H Balakrishnan, N Feamster, T Koponen, D Moon, and S Shenker. Accountable Internet Protocol (AIP) . In Proc. of ACM SIGCOMM, 2008.
8. A. Shamir and Y.Tauman. Improved Online/Offline Signature Schemes. In CRYPTO, 2001.
9. Xin Liu, Xiaowei Yang, David Wetherall, and Thomas Anderson. Efficient and Secure Source Authentication with Packet Passports. In SRUTI, 2006.
10. Wolfgang Muhlbauer, Anja Feldmann, Olaf Maennel, Matthew Roughan, and Steve Uhlig. Building an AS-Topology Model. In ACM SIGCOMM, 2006.
11. W. Xu and J. Rexford. MIRO: Multi-path Interdomain ROuting. In ACM SIGCOMM, 2006.
12. K. Aberer and Z. Despotovic. Managing Trust in a Peer-2-Peer Information System. In Proceedings of the Tenth International Conference on Information and Knowledge Management, 2001.
13. EBay. EBay Feedback Forum. http://pages.ebay.com/services/forum/feedback. html.
14. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. Managing and Sharing Servers' Reputations in P2P Systems. In IEEE Transactions on Knowledge and Data Engineering, vol. 15, n.4, July/August 2003, pp. 840-854.
15. M. Hou, X. Lu, X. Zhou, and C. Zhan. A trust model of p2p system based on confirmation theory. ACM SIGOPS Operating Systems Review, Volume 39 Issue 1, January 2005.
16. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati, and F. Violante. A Reputation-based Approach for Choosing Reliable Resources in Peer-to-Peer Networks. In Proc. of the 9th ACM Conference on Computer and Communications Security, Washington, DC, USA, November 17-21, 2002.
17. InformationWeek. Storm Worm Botnet More Powerful Than Top Supercomputers. http://www.informationweek.com/news/internet/showArticle.jhtml?articleID= 201804528.
18. B. Parno, D. Wendland, E. Shi, A. Perrig, B. Maggs, and Y. Hu. Portcullis: Protecting Connection Setup from Denial-of-Capability Attacks. In Proceedings of the ACM SIGCOMM, 2007.
19. M. Natu and J. Mirkovic. Fine-Grained Capabilities for Flooding DDoS Defense Using Client Reputations. In Proceedings of the Large-Scale Attack and Defense Workshop, 2007.
20. L. Wang, Q. Lu, and D. Luong. Engaging Edge Networks in Preventing and Mitigating Undesirable Network Traffic. In Proc. of NPSec, 2007.
21. A. Bremler-Barr and H. Levy. Spoofing Prevention Method. In Proceedings of INFOCOM'05, March 2005.
22. K. Park and H.Lee. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets. In Proceedings of SIGCOMM 2001.
23. J. Li, J. Mirkovic, M. Wang, P. Reiher, and L. Zhang. SAVE: Source Address Validity Enforcement Protocol. In INFOCOM, 2002.
24. Z. Duan, X. Yuan, and J.Chandrashekar. Constructing Inter-Domain Packet Filters to Control IP Spoofing Based on BGP Updates'. Proceedings of INFOCOM'06, April 2006.
25. C. Jin, H. Wang, and K.G. Shin. Hop-count filtering: an effective defense against spoofed DDoS traffic. Proceedings of the 10th ACM conference on Computer and communications security, 2003.
26. A. Perrig, D. Song, and A. Yaar. StackPi: A New Defense Mechanism against IP Spoofing and DDoS Attacks. Carnegie Mellon University Technical Report, CMU-CS-02-208, February 2003.
27. Mark Allman, Ethan Blanton, and Vern Paxson. An Architecture for Developing Behavioral History. In Proceedings of SRUTI 2005, pp 45-51.