Cooperative mechanism against DDoS attacks

Proceedings of The 2005 International Conference on Security and Management, SAM'05

Volumn , Issue , 2005, Pages 86-96

  Zhang, Guangsen ^a   Parashar, Manish ^a  

^a RUTGERS UNIVERSITY   (United States)

Author keywords

Correlation; Ddos; Gossip; Overlay network; Security

Indexed keywords

COOPERATIVE MECHANISMS; CORRELATION; DDOS; DDOS ATTACKS; DETECTION ACCURACIES; DISTRIBUTED APPROACHES; DISTRIBUTED DENIAL OF SERVICE ATTACKS; GOSSIP; INTERMEDIATE NETWORKS; INTRUSION-DETECTION SYSTEMS; MULTICAST MECHANISMS; NON-PARAMETRIC; POINT DETECTIONS; SECURITY;

COMPUTER CRIME; INFORMATION DISSEMINATION; INTERNET; MULTICASTING; NETWORK SECURITY; OVERLAY NETWORKS; TRANSMISSION CONTROL PROTOCOL;

INTRUSION DETECTION;

EID: 78650759510     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. Rocky K. C. Chang, "Defending Against Flooding-Based, Distributed Denial-of-Service Attacks: A Tutorial," IEEE Communications Magazine (A Special Issue on Telecommunication Network Security), vol. 40, no. 10, pp. 42-51, 2002.
2. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN flooding attacks," In Proceeding of IEEE Infocom'2002, June 2002.
3. I. Gupta, K. P. Birman and R. van Renesse, "Fighting fire with fire: using randomized gossip to combat stochastic scalability limits", Special Issue Journal Quality and Reliability Engineering International: Secure, Reliable Computer and Network Systems (ed. Nong Ye), vol. 18, no. 3, pp. 165-184, May'June, 2002.
4. A.D. Keromytis, Vishal Misra and D. Rubenstein, "Using Overlays to Improve Network Security", in the Proceedings of the ITCom Conference, special track on Scalability and Traffic Control in IP Networks, Boston, MA. August 2002.
5. D. G. Andersen. H. Balakrishnan, M. Frans Kaashoek and R. Morris, "Resilient Overlay Networks" in the Proceedings of 18th ACM SOSP 2001, Banff, Canada, October 2001.
6. T. M. Gil and M. Poleto, "MULTOPS: a data-structure for banndwidth attack detection", In proceedings of 10th Usenix Security Symposium, August 2001.
7. Salim Hariri, Tushneem Dharmagadda, Modukuri Ramkishore, Guangzhi Qu, C.S Raghavendra," Vulnerability Analysis of Faults/Attacks in Network Centric Systems". PDCS 2003
8. J. Mirkovic, G. Prier and P. Reiher, "Attacking DDoS at the Source", Proceedings of ICNP 2002, pp. 312-321, Paris, France, November 2002.
9. T. Peng, C. Leckie and R. Kotagiri, "Protection from Distributed Denial of Service Attack Using History-based IP Filtering", IEEE International Conference on Communications (ICC 2003), Anchorage, Alaska, USA, May, 2003.
10. Q. Huang, H. Kobayashi and B. Liu, "Analysis of a New Form of Distributed Denial of Service Attack," in Proceedings of CISS03, the 37th Annual Conference on Information Science and Systems, Johns Hopkins University Baltimore, Maryland, March, 2003.
11. J. Mirkovic, M. Robinson, P. Reiher, and G.Kuenning, "Alliance Formation for DDoS Defense," Proceedings of the New Security Paradigms Workshop, ACM SIGSAC, August 2003.
12. S. Zhang and P. Dasgupta, "Denying Denial of Service Attacks: A Router Based Solution," The 2003 International Conference on Internet Computing, June 2003.
13. "Powerful Attack Cripples Internet," Associated Press for Fox News 23 October 2002.
14. "Distributed Denial of Service (DDoS) Attacks/tools," http://staff.washington.edu/dittrich/misc/ddos/
15. C. Papadopoulos, R. Lindell, J. Mehringer, A.Hussain and R. Govindan, "COSSACK: Coordinated Suppression of Simultaneous Attacks", DARPA Information Survivability Conference and Exposition, Washington, DC, April 22-24, 2003.
16. Dawn Xiaodong Song and Adrian Perrig, "Advanced and Authenticated Marking Schemes for IP Traceback," Proceedings IEEE Infocomm 2001
17. L. Lamport, "Time, Clocks, and the Ordering of Events in a Distributed System," Communications of the ACM 21, 7 (July 1978), 558-565. Reprinted in several collections, including Distributed Computing: Concepts and Implementations, McEntire et al., IEEE Press, 1984
18. John Ioannidis, Steven M. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks", In Network and Distributed System Security Symposium, NDSS '02, February 2002
19. Floyd, S., Bellovin, S., Ioannidis, J., Kompella, K., Manajan, R., and Paxson, V., "Pushback Messages for Controlling Aggregates in the Network", Internet-draft: draft-floyd-pushbackmessages-00.txt, expired draft, work in progress, July 2001. URL "http://www.icir.org/pushback/ ".
20. Meng-Jang Lin and Keith Marzullo, "Directional gossip: gossip in a wide area network," Dependable Computing - EDDC-3. Third European Dependable Computing Conference. Proceedings (Lecture Notes in Computer Science Vol.1667), Springer-Verlag. 1999, pp.364-79. Berlin, Germany.
21. Cristian Estan and George Varghese, "New Directions in Traffic Measurement and Accounting", SIGCOMM 2002
22. Aditya Akella, Ashwin Bharambe, Mike Reiter and Srinivasan Seshan, "Detecting DDoS Attacks on ISP Networks", ACM SIGMOD/PODS Workshop on Management and Processing of Data Streams (MPDS), FCRC 2003, San Diego, CA.
23. Jun Li, Peter Reiher, and Gerald Popek, "Resilient Self-Organizing Overlay Networks for Security Update Delivery", IEEE Journal on Selected Areas in Communications, special issue on Service Overlay Networks, Vol. 22, No. 1, January 2004.