Trawling traffic under attack overcoming DDoS attacks by target-controlled traffic filtering

Parallel and Distributed Computing, Applications and Technologies, PDCAT Proceedings

Volumn , Issue , 2009, Pages 336-341

  Dolev, Shlomi ^a   Elovici, Yuval ^a   Kesselman, Alex ^b   Zilberman, Polina ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

^b GOOGLE INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK TARGET; CONTROLLED TRAFFIC; DDOS ATTACK; DENIAL OF SERVICE ATTACKS; DISTRIBUTED ALGORITHM; DISTRIBUTED DOS; DISTRIBUTED POLICIES; DOS ATTACKS; FILTERING ALGORITHM; INCOMING TRAFFIC; INTERNET COMMUNITIES; LOCAL INFORMATION; LOWER BOUNDS; NETWORK SERVICE PROVIDERS; POLYNOMIAL-TIME; TRAFFIC CLASSIFICATION; TRAFFIC MIX; TRAFFIC PROCESSING; WORST-CASE PERFORMANCE;

ALGORITHMS; COMPUTER CRIME; DISTRIBUTED COMPUTER SYSTEMS; FISHERIES; INTERNET; INTERNET SERVICE PROVIDERS; POLYNOMIAL APPROXIMATION; ROUTERS; SERVERS; TELECOMMUNICATION TRAFFIC;

TARGETS;

EID: 77950993448     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PDCAT.2009.40     Document Type: Conference Paper

References (23)

1. J. C.R. Bennett, H. Zhang, "WF 2 Q: Worst-case Fair Weighted Fair Queueing", INFOCOM '96, vol.1, pp. 120-128, 1996.
2. M. Bossardt, Dübendorfer T., B. Plattner, "Enhanced Internet security by a distributed traffic control service based on traffic ownership", Journal of Network and Computer Applications, vol.30(3), pp. 841-857, 2007. (Pubitemid 46497017)
3. http://www.cisco.com/en/US/docs/ios/12-2/qos/configuration/guide/ qcfpolsh.html
4. B. Dekeris, L. Narbutaite, T. Adomkus, "A New Adaptive Fair Queueing (AFQ) Scheduler for Support SLA", Proc. of 29th International Conference on ITI, 2007.
5. S. Dolev, "Novel Dynamic Firewall for NSP Networks Deutsche Telekom", European Patent application, 08003000.0-1244, 19.2.08. IL/19.02.07/ILA 18142707.
6. T. Dübendorfer, M. Bossardt, B. Plattner, "Adaptive distributed traffic control service for DDoS attack mitigation", Proc. of 19th IEEE International Parallel and Distributed Processing Symposium, pp. 8, 2005.
7. S. Dolev, Y. Elovici, A. Kesselman, P. Zilberman, "Trawling Traffic under Attack: Overcoming DDoS Attacks by Target-Controlled Traffic Filtering", Technical Report #07-09, Dept. of Computer Science, BenGurion University of the Negev.
8. J. Edmonds, R. M. Karp, "Theoretical Improvements in Algorithmic Efficiency for Network Flow Problems", Journal of the ACM, vol.19(2), pp. 248-264, 1972.
9. A. Garg, A. L. Narasimha Reddy, "Mitigation of DoS attacks through QoS regulation", 10th IEEE International Workshop on Quality of Service, pp. 45-53, 2002.
10. A. V. Goldberg, R. E. Tarjan, "A new approach to the maximum-flow problem", Journal of the ACM, vol.35(4), pp. 921-940, 1988.
11. Y. Huang, X. Geng, A. B. Whinston, "Defeating DDoS attacks by fixing the incentive chain", ACM Transactions on Internet Technology, vol.7(1), Article No. 5, 2007.
12. A. Hussain, J. Heidemann, C. Papadopoulos, "A Framework for Classifying Denial of Service Attacks", Proc. of ACM SIGCOMM Conference, pp. 99110, 2003.
13. J. Ioannidis, S. M. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks", Proc. of Network and Distributed System Security Symposium, 2002.
14. http://www.intel.com/it/pdf/Implementing-WAN-QOS.pdf
15. http://www.juniper.net/us/en/local/pdf/whitepapers/2000180-en.pdf
16. D. Moore, G. M. Voelker, S. Savage, "Inferring internet denial-of-service activity", Proc. of 10th Usenix Security Symposium, vol..10, 2001.
17. A. K. Parekh, R. G. Gallager, "A Generalized Processor Sharing Approach to Flow Control in Integrated Services Networks: The SingleNode Case", IEEE/ACM Transactions on Networking, vol, 1(3), pp. 344-357, 1993.
18. T. Peng, C. Leckie, K. Ramamohanarao, "Survey of Network-Based Defense Mechanisms Countering the DoS and DDoS Problems", ACM Computing Surveys, vol.39(1), Article 3, 2007.
19. N. Poggi, T. Moreno, J. L. Berral, R. Gavaldà, J. Torres, "Web Customer Modeling for Automated Session Prioritization on High Traffic Sites", Lecture Notes in Computer Science, vol.4511, Book User Modeling 2007, pp. 450-454, 2007.
20. A.G.P. Rahbar, O. Yang, "LGRR: A new packet scheduling algorithm for differentiated services packet-switched networks", Computer Communications, vol.32(2), pp. 357-367, 2009.
21. C. Wongvivitkul, S. Ngamsuriyaroj, "The Effects of Filtering Malicious Traffic under DoS Attacks", APAN 24th Meeting in Xi'An, 2007.
22. H. Yin, Z. Wang, Y. Sun, "Enhanced WFQ Algorithm with (m,k)-Firm Guarantee", Lecture Notes in Computer Science, vol.3605, Book Embedded Software and Systems, pp. 339-346, 2005.
23. C. Yue, H. Wang, "Profit-aware Admission Control for Overload Protection in E-commerce Web Sites", 15th IEEE International Workshop on Quality of Service, pp. 188-193, 2007.