Communities of interest for internet traffic prioritization

Proceedings - IEEE INFOCOM

Volumn , Issue , 2009, Pages

  Kalafut, Andrew J ^a   Van Der Merwe, Jacobus ^b   Gupta, Minaxi ^a  

^a INDIANA UNIVERSITY   (United States)

^b AT AND T LABS RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNITIES OF INTEREST; DENIAL OF SERVICE ATTACKS; ENTERPRISE CUSTOMERS; ENTERPRISE NETWORKS; HEAVY TRAFFICS; INTERNET TRAFFIC; NETFLOW DATA; PRIORITIZATION; UNWANTED TRAFFIC;

CUSTOMER SATISFACTION; HEURISTIC METHODS; INTERNET; INTERNET SERVICE PROVIDERS; SALES; TECHNICAL PRESENTATIONS;

TELECOMMUNICATION NETWORKS;

EID: 70349694760     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOMW.2009.5072118     Document Type: Conference Paper

References (24)

1. P. Verkaik, O. Spatscheck, J. van der Merwe, and A. Snoeren, "Primed: A community-of-interest-based DDoS mitigation system," in SIGCOMM Workshop on Large Scale Attack Defense (LSAD), September 2006.
2. N. Duffield, C. Lund, and M. Thorup, "Properties and prediction of flow statistics from sampled packet streams," in Proc. ACM SIGCOMM Internet Measurement Workshop, Marseille, France, Nov. 2002, pp. 159-171.
3. W. Aiello, C. Kalmanek, P. McDaniel, S. Sen, O. Spatscheck, and J. Van der Merwe, "Analysis of Communities of Interest in Data Networks," in Proc. PAM Workshop, Mar. 2005.
4. P. McDaniel, S. Sen, O. Spatscheck, J. Van der Merwe, W. Aiello, and C. Kalmanek, "Enterprise security: A community of interest based approach," in Proc. NDSS, Feb. 2006.
5. P. Marques, N. Sheth, R. Raszuk, B. Greene, J. Mauch, and D. McPer-son, "Dissemination of flow specification rules," IETF Internet-Draft, August 2005.
6. S. Blake, D. Black, M. Carlson, E. Davies, Z. Wang, and W. Weiss, "An architecture for differentiated services," IETF RFC 2475, December 1998.
7. M. A. El-Gendy, A. Bose, and K. G. Shin, "Evolution of the Internet QoS and support for soft real-time applications," Proceedings of the IEEE, vol. 91, no. 7, pp. 1086-1104, Jul. 2003.
8. X. Xipeng and L. M. Ni, "Internet QoS: A big picture," IEEE Network, vol. 13, no. 2, pp. 8-18, Mar./Apr. 1999.
9. C. Systems, "Cisco ios quality of service solutions configuration guide," www.cisco.com.
10. J. Networks, "Policy framework configuration guide," www.juniper.net.
11. C. Cortes, D. Pregibon, and C. T. Volinsky, "Communities of interest," Intelligent Data Analysis, vol. 6, no. 3, pp. 211-219, 2002.
12. A. Karasaridis, B. Rexroad, and D. Hoeflin, "Wide-scale botnet detection and characterization," in Conference on Hot Topics in Understanding Botnets (HotBots), April 2007.
13. J. Ioannidis and S. M. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks," in Proc. Network and Distributed System Security Symposium (NDSS), San Diego, CA, Feb. 2002.
14. A. Yaar, A. Perrig, and D. Song, "Pi: A path identification mechanism to defend against DDoS attacks," in Proc. IEEE Symposium on Security and Privacy, Oakland, CA, 2003.
15. A. Yaar, A. Perrig, and D. Song, "SIFF: A stateless Internet flow filter to mitigate DDoS flooding attacks," in Proc. IEEE Symposium on Security and Privacy, Oakland, CA, May 2004.
16. J. Mirkovic and P. Reiher, "A taxonomy of DDoS attacks and defense mechanisms," ACM Computer Communications Review, vol. 34, no. 2, pp. 39-54, 2004.
17. S. Kandula, D. Katabi, M. Jacob, and A. Berger, "Botz-4-Sale: Surviving Organized DDoS Attacks That Mimic Flash Crowds," in Proc. 2nd USENIX NSDI, Boston, MA, May 2005.
18. M. Walfish, H. Balakrishnan, D. Karger, and S. Shenker, "DDoS defense by offense," in Proc. ACM SIGCOMM, Pisa, Italy, Aug. 2006.
19. H. Ballani, Y. Chawathe, S. Ratnasamy, T. Roscoe, and S. Shenker, "Off by default!" in Proc. ACM HotNets Workshop, Nov. 2005.
20. J. Chou, B. Lin, S. Sen, and O. Spatscheck, "Minimizing collateral damage by proactive surge protection," in SIGCOMM Workshop on Large Scale Attack Defense (LSAD), August 2007.
21. S. Anderson and D. Hogrefe, "Mouse trapping: A flow data reduction method," in Proc. International Conference on Internet Monitoring and Protection, 2008.
22. T. M. Gil and M. Poletto, "MULTOPS: a data-structure for bandwidth attack detection," in USENIX Security Symposium, 2001.
23. Z. M. Mao, V. Sekar, O. Spatscheck, J. van der Merwe, and R. Va-sudevan, "Analyzing large ddos attacks using multiple data sources," in SIGCOMM Workshop on Large Scale Attack Defense (LSAD), September 2006.
24. C. Cranor, T. Johnson, O. Spatscheck, and V. Shkapenyuk, "Gigascope: a stream database for network applications," in ACM SIGMOD, 2003.