Infilter: Predictive ingress filtering to detect spoofed IP traffic

Proceedings - International Conference on Distributed Computing Systems

Volumn , Issue , 2005, Pages

  Ghosh, Abhrajit ^a   Wong, Larry ^a   Di Crescenzo, Giovanni ^a   Talpade, Rajesh ^a  

^a TELCORDIA TECHNOLOGIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; CRIME; GATEWAYS (COMPUTER NETWORKS); INTERNET PROTOCOLS; ROUTERS;

ATTACK PACKETS; ATTACK TARGET; CYBER ATTACKERS; CYBER-ATTACKS; INGRESS FILTERING; IP PACKETS; IP TRAFFIC; IP-NETWORK; NETWORK-BASED; TRACE BACKS;

NETWORK SECURITY;

EID: 77958147616     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCSW.2005.78     Document Type: Conference Paper

References (25)

1. Y.Rekhter and T. Li, “A Border Gateway Protocol,” IETF RFC 1771, March 1995.
2. Caida website, http://www.caida.org
3. R. Pethia, A. Paller, G. Spafford, “Consensus Roadmap for Defeating Distributed Denial of Service Attacks,” http://www.sans.org/dosstep/dos_roadmap.pdf
4. Waikato Applied Network Dynamics group, “The DAG project" http://dag.cs.waikato.ac.nz
5. Egress Filtering, http://www.sans.org/y2k/egress.htm
6. Flowtools, http://www.splintered.net/sw/flow-tools/
7. “The Intrusion Detection Message Exchange Format” Internet Draft, IETF Intrusion Detection Exchange Format Working Group, http://www.ietf.org/html.charters/idwgcharter.html
8. Eyal Kushilevitz, Rafail Ostrovsky, Yuval Rabani. “Efficient Search for Approximate Nearest Neighbor in High Dimensional Spaces” SIAM J. Comput. 30(2): 457-474 (2000)
9. C. Labovitz et al, “Internet Routing Instability,” IEEE/ACM Transactions on Networking, October 1998.
10. List of global Looking Glass sites, http://www.traceroute.org
11. R. Malan, et al, “Observations and Experiences Tracking Denial-Of-Service Attacks across a Large Regional ISP,” http://www.arbornetworks.com/downloads/research37/nanogSlides4.pdf
12. Levent Ertoz, et al, Detection of Novel Network “Attacks Using Data Mining”, ICDM Workshop on Data Mining for Computer Security (DMSEC), Melbourne, FL, Nov 19 (2003).
13. Netflow, IETF RFC 3954
14. NLANR website, http://www.nlanr.net
15. NMAP http://www.insecure.org/nmap
16. J. Moy, “OSPF Version 2,” RFC 2328, April 1998.
17. T. Peng, C. Leckie and R. Kotagiri. “Protection from Distributed Denial of Service Attack Using History-based IP Filtering” IEEE International Conference on Communications (ICC 2003), Anchorage, Alaska, USA, May, 2003.
18. Routeviews project, University of Oregon, http://www.routeviews.org
19. David Moore, et al, “Inside the Slammer Worm” IEEE Security and Privacy, 1(4):33-39, July 2003.
20. Snort IDS, http://www.snort.org
21. W. Stevens, “TCP/IP Illustrated, Volume I: The Protocols”, Addison-Wesley, 1994.
22. W. Lee, S. J. Stolfo, “Data Mining Approaches for Intrusion Detection”, Proceedings of the 1998 USENIX Security Symposium, 1998.
23. S. Templeton, K. Levitt. “Detecting Spoofed Packets” Proceedings of the Third DARPA Information Survivability Conference and Exposition (DISCEX III), Washington, D.C., April 22-24, 2003.
24. Cisco URPF Document, ftp://ftpeng.cisco.com/cons/isp/security/URPF-ISP.pdf
25. V. Paxson, “End-to-end Routing Behavior in the Internet,” IEEE/ACM Transactions on Networking, Vol. 5, No. 5, October 1997.