Fine-grained capabilities for flooding ddos defense using client reputations

Proceedings of the 2007 Workshop on Large Scale Attack Defense, LSAD '07

Volumn , Issue , 2007, Pages 105-112

  Natu, Maitreya ^a   Mirkovic, Jelena ^a  

^a UNIVERSITY OF DELAWARE   (United States)

Author keywords

Distributed denial of service defense; Dynamic packet stamping; Packet capabilities; Traffic policing

Indexed keywords

DESCRIPTORS; DISTRIBUTED DENIAL OF SERVICE DEFENSE; LONG-TERM BEHAVIOR; MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS; OPERATIONAL COSTS; PRIORITY LEVELS; SECURITY AND PROTECTION; TRAFFIC POLICING;

COST REDUCTION; DYNAMICS; NETWORK SECURITY; STAMPING; TRANSMISSION CONTROL PROTOCOL;

TELECOMMUNICATION TRAFFIC;

EID: 77954321139     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1352664.1352668     Document Type: Conference Paper

References (9)

1. T. Anderson, T. Roscoe, and D. Wetherall. Preventing Internet Denial of Service with Capabilities. In Proc. Of HotNets-II, 2004.
2. M. Casado, A. Akella, P. Cao, N. Provos, and S. Shenker. Cookies Along Trust-boundaries (CAT): Accurate and Deployable Flood Protection. In Proc. Of 2nd Conference on Steps To Reducing Unwanted Traffic on the Internet, 2006.
3. W. Diffie and M. E. Hellman. New Directions in Cryptography. IEEE Transactions on Information Theory, 22(6):644-654, 1976.
4. Honeynet Project and Research Alliance. Know your enemy: Tracking botnets. http://www.honeynet.org/papers/bots/.
5. D.R. Simon, S. Agarwal, and D. A. Maltz. AS-Based Accountability as a Cost-Effective DDoS Defense. In Winter International Symposium on Information and Communication Technologies, 2004.
6. H. Wang, A. Bose, M.A. El-Gendy, and K. G. Shin. IP Easy-pass: A Light-Weight Network-Edge Resource Access Control. IEEE/ACM Transactions on Networking, 13(6):1247-1260, 2005.
7. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Joglekar. An integrated experimental environment for distributed systems and networks. In Proc. Of OSDI, pages 255-270, December 2002.
8. A. Yaar, A. Perrig, and D. X. Song. SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks. In Proc. of IEEE Symposium on Security and Privacy, 2004.
9. X. Yang, D. Wetherall, and T. Anderson. A DoS-limiting network architecture. In Proc. of ACM SIGCOMM, pages 241-252, 2005.