A new form of dos attack in a cloud and its avoidance mechanism

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2010, Pages 65-75

  Liu, Huan ^a  

^a ACCENTURE   (United States)

Author keywords

Bandwidth estimation; DOSattack

Indexed keywords

BANDWIDTH ESTIMATION; CLOUD INFRASTRUCTURES; COLOCATIONS; CORPORATE DATA; COUNTER MEASURES; DATA CENTERS; DETECT AND AVOID; DOS ATTACKS; DOSATTACK; NEW FORMS; PERFORMANCE REQUIREMENTS; SHARED INFRASTRUCTURE;

COMPUTER CRIME;

COMPUTER SYSTEMS;

EID: 78650154288     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1866835.1866849     Document Type: Conference Paper

References (33)

1. AL-FARES, M., LOUKISSAS, A., AND VAHDAT, A. A scalable, commodity data center network architecture. In Proc. SIGCOMM (2008).
2. CARTER, R. L., AND CROVELLA, M. E. Measuring bottleneck link speed in packet-switched networks. Tech. rep., Performance Evaluation, 1996.
3. CHEN, L.-J., SUN, T., WANG, B.-C., SANADIDI, M., AND GERLA, M. Pbprobe: A capacity estimation tool for high speed networks. Computer Communications 31, 17 (2008), 3883 - 3893.
4. DOVROLIS, C., RAMANATHAN, P., AND MOORE, D. What do packet dispersion techniques measure? In In Proceedings of IEEE INFOCOM (2001), pp. 905-914.
5. GREENBERG, A., JAIN, N., KANDULA, S., KIM, C., LAHIRI, P., MALTZ, D. A., PATEL, P., AND SENGUPTA, S. Vl2: A scalable and flexible data center network. In Proc. SIGCOMM (2009).
6. GUO, C., LU, G., LI, D., WU, H., ZHANG, X., SHI, Y., TIAN, C., ZHANG, Y., AND LU, S. Bcube: A high performance, server-centric network architecture for modular data centers. In Proc. SIGCOMM (2009).
7. GUO, C., WU, H., TAN, K., SHIY, L., ZHANG, Y., AND LUZ, S. Dcell: A scalable and fault-tolerant network structure for data centers. In Proc. SIGCOMM (2008).
8. HOPPS, C. Analysis of an Equal-Cost Multi-Path Algorithm. RFC 2992 (Informational), Nov. 2000.
9. HU, N., LI, L. E., MAO, Z. M., STEENKISTE, P., AND WANG, J. Locating internet bottlenecks: algorithms, measurements, and implications. In SIGCOMM '04: Proceedings of the 2004 conference on Applications, technologies, architectures, and protocols for computer communications (New York, NY, USA, 2004), ACM, pp. 41-54.
10. HU, N., LI, L. E., MAO, Z. M., STEENKISTE, P., AND WANG, J. A measurement study of internet bottlenecks. In Proc. IEEE Infocom (2005).
11. HU, N., MEMBER, S., STEENKISTE, P., AND MEMBER, S. Evaluation and characterization of available bandwidth probing techniques. IEEE Journal on Selected Areas in Communications 21 (2003), 879-894.
12. JAIN, M., AND DOVROLIS, C. End-to-end available bandwidth: measurement methodology, dynamics, and relation with tcp throughput. IEEE/ACMTrans. Netw. 11, 4 (2003), 537-549.
13. JIN, G., AND TIERNEY, B. L. System capability effects on algorithms for network bandwidth measurement. In IMC '03: Proceedings of the 3rd ACMSIGCOMMconference on Internet measurement (New York, NY, USA, 2003), ACM, pp. 27-38.
14. KANDULA, S., KATABI, D., JACOB, M., AND BERGER, A. Botz-4-sale: Surviving organized ddos attacks that mimic flash crowds. In Proc. NSDI (2005).
15. KESHAV, S. A control-theoretic approach to flow control. In ACMSIGCOMM(1991), pp. 3-15.
16. U.s. eyes n. korea for âǍÝmassiveâǍ Ź cyber attacks. http://www.msnbc.msn.com/id/31789294.
17. LAI, K., AND BAKER, M. Nettimer: a tool for measuring bottleneck link, bandwidth. In USITS'01: Proceedings of the 3rd conference on USENIX Symposium on Internet Technologies and Systems (Berkeley, CA, USA, 2001), USENIX Association, pp. 11-11.
18. MAN, C. L. T., HASEGAWA, G., AND MURATA, M. Inline bandwidth measurement techniques for gigabit networks. Int. J. Internet Protoc. Technol. 3, 2 (2008) 81-94.
19. MELANDER, B., BJORKMAN, M., AND GUNNINBERG, P. A new end-to-end probing and analysis method for estimating bandwidth bottlenecks. In Proc. GlobeCOM (2000).
20. MYSORE, R. N., PAMBORIS, A., FARRINGTON, N., HUANG, N., MIRI, P., RADHAKRISHNAN, S., SUBRAMANYA, V., AND VAHDAT, A. Portland: A scalable fault-tolerant layer 2 data center network fabric. In Proc. SIGCOMM (2009).
21. NETPERF. http://www.netperf.org/netperf/.
22. Cisco data center infrastructure 2.5 design guide. http://www.cisco.com/ univercd/cc/td/doc/solution/dcidg21.pdf.
23. Poisson traffic generator. http://www.spin.rice.edu/Software/poisson-gen/ .
24. PRASAD, R. S., MURRAY, M., DOVROLIS, C, AND CLAFFY, K. Bandwidth estimation: Metrics, measurement techniques, and tools. IEEE Network 17 (2003), 27-35.
25. Rackspace ipo will fund new data centers. http://www.datacenterknowledge. com/archives/2008/04/29/rackspace-ipo-will-fund-new-data-centers.
26. RIBEIRO, V., COATES, M., RIEDI, R., SARVOTHAM, S., HENDRICKS, B., AND BARANIUK, R. Multifractal cross-traffic estimation. In Proc. ITC Specialist Seminar on IP Trac Measurement, Modeling, and Management (2000), pp. 15-1.
27. RIBEIRO, V. J., RIEDI, R. H., BARANIUK, R. G., NAVRATIL, J., AND COTTRELL, L. Pathchirp: Efficient available bandwidth estimation for network paths. In Passive and Active Measurement Workshop (La Jolla, CA, Apr. 2003).
28. RISTENPART, T., TROMER, E., SHACHAM, H., AND SAVAGE, S. Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In Proc. 16th ACMconference on Computer and communications security table of contents (2009).
29. SAVAGE, S., WETHERALL, D., KARLIN, A., AND ANDERSON, T. Practical network support for ip traceback. In Proc. SIGCOMM (2000).
30. SOMMERS, J., BARFORD, P., AND WILLINGER, W. A proposed framework for calibration of available bandwidth estimation tools. In ISCC 06: Proceedings of the 11th IEEE Symposium on Computers and Communications (Washington, DC, USA, 2006), IEEE Computer Society, pp. 709-718.
31. STANIFORD, S., PAXSON, V., AND WEAVER., N. How to own the internet in your spare time. In Proc. USENIX Security (2002).
32. STRAUSS, J., KATABI, D., AND KAASHOEK, F. A measurement study of available bandwidth estimation tools. In IMC 03: Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement (New York, NY, USA, 2003), ACM, pp. 39-44.
33. YAAR, A., PERRIG, A., AND SONG, D. Fit: Fast internet traceback. In Proc. IEEE Infocom (March 2005).