Robust TCP stream reassembly inthepresence ofadversaries

14th USENIX Security Symposium

Volumn , Issue , 2005, Pages 65-80

  Dharmapurikar, Sarang ^a   Paxson, Vern ^b  

^a WASHINGTON UNIVERSITY   (United States)

^b INTERNATIONAL COMPUTER SCIENCE INSTITUTE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ECONOMIC AND SOCIAL EFFECTS; HIGH SPEED NETWORKS; INTRUSION DETECTION; SEMANTICS; TRANSMISSION CONTROL PROTOCOL;

CONTENT INSPECTIONS; HIGH-SPEED NETWORK DEVICES; INTRUSION PREVENTION SYSTEMS; NETWORK INTRUSION DETECTION; OUT-OF-SEQUENCE PACKETS; RESOURCE AVAILABILITY; TRANSFORMATION SYSTEMS; TRANSPORT PROTOCOLS;

NETWORK LAYERS;

EID: 70449121907     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. Internet core router test / packet ordering. Light Reading, http://www.lightreading.com/document.asp?doc_id4009&page_number=8, March 2001.
2. Mark Allman, Hari Balakrishnan, and Sally Floyd. Enhancing TCP’s Loss Recovery Using Limited Transmit. RFC 3042, IETF, January 2001.
3. Mark Allman, Vern Paxson, and W. Richard Stevens. TCP Congestion Control. RFC 2581, IETF, April 1999.
4. John Bellardo and Stefan Savage. Measuring packet reordering. In Proceedings of the second ACM SIGCOMM Workshop on Internet measurement, pages 97–105. ACM Press, 2002.
5. Jon C. R. Bennett, Craig Partridge, and Nicholas Shectman. Packet reordering is not pathological network behavior. IEEE/ACMTrans. Netw., 7(6):789–798, 1999.
6. Ethan Blanton and Mark Allman. On making TCP more robust to packet reordering. SIGCOMM Comput. Commun. Rev., 32(1):20– 30, 2002.
7. Stephan Bohacek, Joo P. Hespanha, Junsoo Lee, Chansook Lim, and Katia Obraczka. TCP-PR: TCP for persistent packet reordering. In Proceedings of the 23rd International Conference on Distributed Computing Systems. IEEE Computer Society, 2003.
8. Thomas H. Cormen, Charles E. Leiserson, and Ronald L. Rivest. Introduction to Algorithms. Prentice Hall, 1998.
9. Scott Crosby and Dan Wallach. Denial of service via algorithmic complexity attacks. In Proceedings of the 12th USENIX Security Symposium. USENIX, August 2003.
10. Jianping Xu et al. A 10Gbps ethernet TCP/IP processor. In Hot Chips, August 2003.
11. Landan Gharai, Colin Perkins, and Tom Lehman. Packet reordering, high speed networks and transport protocol performance. In Proceedings of IEEE ICCCN 2004, 2004.
12. Mark Handley, Christian Kreibich, and Vern Paxson. Network intrusion detection: Evasion, traffic normalization, and end-to-end protocol semantics. In Proceedings of USENIX Security Symposium, 2001.
13. Sharad Jaiswal, Gianluca Iannaccone, Christophe Diot, Jim Kurose, and Don Towsley. Measurement and classification of outof- sequence packets in a Tier-1 IP backbone. In Proceedings of IEEE Infocom 2003, 2003.
14. Micron Inc. Double data rate (DDR) SDRAM MT8VDDT6464HD 512MB data sheet, 2004.
15. Micron Inc. Double data rate (DDR) SDRAM MT8VDDT6464HD 512MB datasheet,2004.
16. Vern Paxson. End-to-end Internet packet dynamics. In Proceedings of ACM SIGCOMM, pages 139–154, Cannes, France, 1997.
17. Vern Paxson. Bro: A system for detecting network intruders in real time. Computer Networks, December 1999.
18. Thomas Ptacek and Thomas Newsham. Insertion, evasion, and denial of service: Eluding network intrusion detection. Technical Report, Secure Networks, 1998.
19. Sarang Dharmapurikar and John Lockwood. Synthesizable design of a multi-module memory controller. Technical Report WUCS- 01-26, October 2001.
20. David Schuehler and John Lockwood. TCP-splitter: A TCP/IP flow monitor in reconfigurable hardware. In Hot Interconnects-10, August 2002.
21. Ming Zhang, Brad Karp, Sally Floyd, and Larry Peterson. RRTCP: A reordering-robust TCP with DSACK. In Proceedings of the 11th IEEE International Conference on Network Protocols. IEEE Computer Society, 2003.