Detecting SYN flooding agents under any type of IP spoofing

IEEE International Conference on e-Business Engineering, ICEBE'08 - Workshops: AiR'08, EM2I'08, SOAIC'08, SOKM'08, BIMA'08, DKEEE'08

Volumn , Issue , 2008, Pages 499-505

  Nashat, Dalia ^a   Jiang, Xiaohong ^a   Horiguchi, Susumu ^a  

^a TOHOKU UNIVERSITY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

AGENTS; ELECTRONIC COMMERCE; INTERNET PROTOCOLS; ROUTERS; TRANSMISSION CONTROL PROTOCOL;

ACCESS PATTERNS; CUMULATIVE SUMS; DETECTION SCHEMES; EFFICIENT DETECTIONS; EXTENSIVE SIMULATIONS; FLOODING AGENTS; IP SPOOFING; NETWORK RESOURCES; ON SITES; PACKET HEADERS; RETRANSMISSION; SUB NETWORKS; SYN FLOODING; TCP SYN FLOODING; TWO STREAMS;

COMPUTER NETWORKS;

EID: 58149102866     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICEBE.2008.18     Document Type: Conference Paper

References (18)

1. A. Chakrabarti and G. Manimaran, "Internet Infrastructure Security: A Taxonomy," in Proc. Conf. IEEE Network, vol. 16, no.6, pp. 13-21, 2002.
2. CERT Coordinate Center, "Denial of Service Attacks," http://www.cert.org/tech-tips/denial-of-service.html.
3. B. Al-Duwairi and G. Manimaran,"International dropping: A novel scheme for syn flooding mitigation," in Proc. Conf. IEEE INFOCOM, April 2006.
4. D. J. Bernstein and E. Schenk, "Linux Kernal SYN Cookies Firewall Project".
5. J. Lemon, "Resisting SYN Flooding DOS Attacks with SYN Cache," in Proc. Conf. USENIX BSD, February 2001.
6. Check Point software Technologies Ltd. SynDefender: http://www. checkpoint.com/products/firewall-l.
7. Netscreen 100 Firewall Appliance http://www.netscreen.com/.
8. H. Wang, D. Zhang, and K. Shin, "SYN-dog: Sniffing SYN flooding sources," in Proc. Conf. IEEE ICDCS'02, July 2002.
9. V. Paxson and M. Allman, "RFC 2988 - Computing TCP's Retransmission Timer," www.ietf.org/rfc/rfc2988.txt, Nov. 2000.
10. J. Mirkovic and P. Reiher, "A taxonomy of DDoS attack and DDoS defense mechanisms," in Proc. Conf. ACM SIGCOMM Computer Communications Review, April 2004.
11. L. Fan, P. Cao, J. Almeida, and A. Z. Broder, "Summary cache: a scalable widearea Web cache sharing protocol," IEEE/ACM Trans, on Networking, vol.8, no. 3, pp. 281-293, 2000.
12. S. Abdelsayed, D. Glimsholt, C. Leckie, S. Ryan, and S. Shami, "An efficient filter for denial-of-service bandwidth attacks," in Proc. Conf. IEEE GLOBECOM, vol.3, pp. 1353-1357, 2003.
13. E. Chan, H. Chan, K. Chan, V. Chan, S. Chanson, and etc. "IDR: an intrusion detection router for defending against distributed denial-of-service (DDoS) attacks," in Pro. Conf. IS-PAN, pp. 581586, 2004.
14. W. Chen and D. Yeung, "Defending Against TCP SYN Flooding Attacks Under Different Types of TP Spoofing," in Proc. Conf. IEEE ICN, April 2006.
15. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, and W. T. Strayer"Hash-based IP traceback," in Proc. Conf. ACM SIGCOMM, pp. 314, August 2001.
16. C. Sun, J. Fan, L. Shi, and B. Liu, "A Novel Router-based Scheme to Mitigate SYN Flooding DDoS Attacks," in Proc. Conf. IEEE INFOCOM (Poster), 2007.
17. M. Basseville and I. V. Nikiforov, "Detection of Abrupt Changes: Theory and Application," Prentice Hall, 1993.
18. The Internet Traffic Archive http://ita.ee.lbl.gov/index.html.