Practical study of a defense against low-rate TCP-targeted DoS attack

International Conference for Internet Technology and Secured Transactions, ICITST 2009

Volumn , Issue , 2009, Pages

  Efstathopoulos, Petros ^a  

^a SYMANTEC RESEARCH LABS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

LINUX; NETWORK SECURITY; RANDOM PROCESSES; SYNCHRONIZATION; TRANSMISSION CONTROL PROTOCOL;

AVERAGE VOLUME; COMMERCIAL SYSTEMS; DENIAL OF SERVICE; DETECTION SYSTEM; LOW-LATENCY NETWORKS; RETRANSMISSION TIMEOUT; TCP CONNECTIONS; TCP THROUGHPUT;

DENIAL-OF-SERVICE ATTACK;

EID: 77950304151     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icitst.2009.5402593     Document Type: Conference Paper

References (10)

1. DummyNet homepage [Online]. http://bit.ly/1nMKZR, [Accessed, 29 May 2009].
2. Iperf homepage [Online]. http://bit.ly/oFTmv, [Accessed, 29 May 2009].
3. A. Kuzmanovic and E. W. Knightly. Low-rate tcp-targeted denial of service attacks and counter strategies. IEEE/ACM Trans. Netw., 14(4):683-696, 2006.
4. V. Paxson and M. Allman. Computing TCP's Retransmission Timer. RFC 2988 (Proposed Standard), Nov. 2000.
5. I. Psaras and V. Tsaoussidis. The tcp minimum rto revisited. In Networking 2007, Atlanta, GA, USA, May 2007.
6. I. Rhee and L. Xu. Cubic: A new tcp-friendly high-speed tcp variants. In 3rd International Workshop on Protocols for Fast Long-Distance Networks, 2003.
7. P. Sarolahti and A. Kuznetsov. Congestion control in linux tcp. In Proc. 2002 USENIX Annual Technical Conference - FREENIX Track, pages 49-62, June 2002.
8. L. Xu, K. Harfoush, and I. Rhee. Binary increase congestion control (bic) for fast long-distance networks. INFOCOM 2004. Twenty-third AnnualJoint Conference of the IEEE Computer and Communications Societies, 4:2514-2524 vol.4, 7-11 March 2004.
9. G. Yang, M. Gerla, and M. Y. Sanadidi. Defense against low-rate tcp-targeted denial-of-service attacks. In ISCC '04: Proceedings of the Ninth International Symposium on Computers and Communications 2004 Volume2 (ISCC"04), pages 345-350, Washington, DC, USA, 2004. IEEE Computer Society.
10. Y. Zhang, Z. M. Mao, and J. Wang. Low-rate tcp-targeted dos attacks disrupts internet routing. In Proc. 14th Annual Network & Distributed System Security Symposium (NDSS), Feb 2007.