A cloud tracing and filtering framework for defensing against denial of service attacks

International Journal of Digital Content Technology and its Applications

Volumn 4, Issue 9, 2010, Pages 212-224

  Lin, Fan ^a   Zeng, Wenhua ^a   Jiang, Yi ^a  

^a XIAMEN UNIVERSITY   (China)

Author keywords

Cloud computing; Denial of service attacks; Network security; SaaS

Indexed keywords

CLOUD COMPUTING; DENIAL OF SERVICE ATTACKS; DOS ATTACKS; ELECTRICITY GRIDS; FILTERING FRAMEWORK; INTERNET BASED COMPUTING; NEUTRAL NETWORK; SAAS; SECURITY EXPERTS; SECURITY SERVICES; SERVICE BROKER; SHARED RESOURCES; SHORT PERIODS;

COMPUTER CRIME; DISTRIBUTED COMPUTER SYSTEMS; HTTP; TRANSMISSION CONTROL PROTOCOL;

NETWORK SECURITY;

EID: 78751557181     PISSN: 19759339     EISSN: None     Source Type: Journal    
DOI: 10.4156/jdcta.vol4.issue9.26     Document Type: Article

References (41)

1. Amazon Web Services. Amazon Elastic Compute Cloud (ec2), Available on the WWW, 2009. http://aws.amazon.com/ec2,last accessed 10,November 2009.
2. Balding G. What everyone ought to know about cloud security. Cloudsecurity.com, http://www.slideshare.net/craigbalding/what-everyone-ought-to-know-about-cloud-security, 2009.
3. Belenky A, Ansari N. Tracing multiple attackers with deterministic packet marking (DPM). In: Proceedings of IEEE Pacific Rim conference on communications, computers and signal processing, vol. 1, 2003. p. 49-52.
4. Danchev D. Iranian opposition launches organized cyber attack against pro-Ahmadinejad sites. ZDNet blog, http://blogs.zdnet.com/security/?p=3613, June 15, 2009a.
5. Danchev D. Iranian Opposition DDoS-es pro Ahmadinejad Sites. Dancho Danchev's Blog, http://ddanchev.blogspot.com/2009/06/iranian-opposition-ddos-es-pro.html, 16 June 2009b.
6. Dean D. An algebraic approach to IP traceback. ACM Transactions on Information and System Security (1094-9224) 2002;5(2):119.
7. Dittrich D. The ''mstream'' distributed denial of service attack tool. University of Washington, http://staff.washington.edu/dittrich/misc/mstream.analysis.txt, 2000.
8. Dittrich D. The DoS Project's ''trinoo'' distributed denial of service attack tool. University of Washington, http://staff.washington.edu/dittrich/misc/trinoo. Analysis, 1999.
9. E-Crime Congress. E-Crime Survey, http://www.e-crimecongress.org/ecrime2009/documents/e-CrimeSurvey2009_AKJ_KPMG(1).pdf2009.
10. ElasticHosts. Cloud hosting, Available on WWW, http://www.elastichosts.com/?gclid=CMSSxpyAjJ4CFcEtpAodOyJRqw,2009.
11. Enomaly.com. Enomalism elastic computing infrastructure. http://www.enomaly.com,2009.
12. F Secure. F-Secure Virus Descriptions: Agobot. http://www.f-secure.com/v-descs/agobot.shtml, 2003.
13. Fowler A. Fear in Fast Lane. Four Corners Program, ABC, http://www.abc.net.au/4corners/content/2009/s2655088.htm, 2009.
14. Georgia Government. Russian Cyberwar on Georgia. www.georgiaupdate.gov.ge, October 2008, lasted accessed 17 July 2009.
15. He Y, Chen W, Peng, W, Yang, M. Efficient and beneficial defence against DDoS direct attack and reflector attack, ISPA, 2005, LNCS, vol. 3758, p. 576-87.
16. Hewlett Packard. HP integrated lights-out 2 user guide. Technical report, HP, 200
17. Hibler M, Ricci R, Stoller, L Duerig J, Guruprasad S, Stack T, et al. Large-scale virtualization in the emulab network testbed. In: Proceedings of the 2008 USENIX annual technical conference, 2008.
18. INetu Managed Hosting. Cloud Hosting, Available on WWW, http://www.inetu.net/hostingsolutions/flexible-capacity.php?INCC=Adwords.hybrid&gclid=CLC844r_i54CFc0vpAoduizPqA,2009.
19. Jensen M, Gruschka N, Herkenhoner R, Luttenberger N. SOA and web services: new technologies, new standards - new attacks. In: Proceedings of the fifth European conference on web services, 0-7695-3044-3/07, 2007.
20. Keahey K, Foster I, Freeman T, Zhang X. Virtual workspaces: achieving quality of service and quality of life in the grid. Science Program 2005;13(4):265-75.
21. Laplante P, Zhang J, Voas J. What's in a name? Distinguishing between saas and soa IT Professional 2008;10(3):46-50.
22. Lenk A, Klems M, Nimis J, Tai S, Sandholm T. What's inside the Cloud? An architectural map of the Cloud landscape. In: International Conference on Software Engineering, Proceedings of the 2009 ICSE Workshop on Software Engineering Challenges of Cloud Computing, 2009. p. 23-31, ISBN:978-1-4244-3713-9.
23. McNett M, Gupta D, Vahdat A, Voelker GM, Usher: an extensible framework for managing clusters of virtual machines. In: Proceedings of the 21st Large installation system administration conference (LISA), November 2007.
24. Metz C. DDoS attack rains down on Amazon cloud. The Register, Online Article, http://www.theregister.co.uk/2009/10/05/amazon_bit bucket_outage/, 26 October 2009.
25. Nadalin A, Kaler C, Monzillo R, Hallam-Baker P. Web Services Security: SOAP Message Security 1.1 (WSSecurity 2004). http://docs.oasis-open.org/wss/v1.1/,2008a.
26. Nadalin A, Kaler C, Monzillo R, Hallam-Baker P. Web Services Security: SOAP Message Security 1.1 (WSSecurity 2004). http://docs.oasis-open.org/wss/ v1.1. 2008.
27. Napper J, Bientinesi P. Can Cloud Computing Reach the Top500? UCHPC-MAW'09, Ischia, Italy, May 18-20, 2009.
28. Nurmi D, Wolski R, Grzegorczyk C, Obertelli G, Soman S, Youseff L, et al. The eucalyptus open-source cloud-computing system. In: EEE Computer Society.
29. CCGRID'09: Proceedings of the 2009 ninth IEEE/ACM international symposium on cluster computing and the grid, 2009. p. 124-131.
30. Padmanabhuni S; Singh V., Senthil kumar K M, Chatterjee A. Web services, preventing service oriented denial of service (PreSODoS): a proposed approach. In: Proceedings of the ICWS apos;06, international conference on volume, issue, September 2006. p.577-84.
31. Page Rebooter. com, http://www.pagereboot.com/
32. Rogers L. What is a Distributed Denial of Service (DDoS) attack and what can I do about it? Computer Emergency Response Team, http://www.cert.org/ homeusers/ddos.html
33. Savage S, Wetherall D, Karlin A, Anderson T. Practical network support for IP traceback. SIGCOMM'00, Stockholm, Sweden 2000, 2001.
34. Sophos, http://www.sophos.com
35. Stewart J. HTTP DDoS attack mitigation using tarpitting. Securework.com, http://www.secureworks.com/research/threats/ddos/S
36. TCPDump.com, http://www.tcpdump.org/
37. The Study of Honeypot Technology (StuPot). Deakin University, http://www.deakin.edu.au/~ashley/
38. Wireshark.com. t-shark, http://www.wireshark.org/docs/man-pages/tshark.Html
39. Van Beignum I. IPv6: coming to a root server near you. ars technical, http://arstechnica.com/news.ars/post/20080102-icann-to-add-ipv6-addresses-forroot-dns-servers.htm,02 January 2008
40. Vmware.com. VMware Server 2, http://www.vmware.com/products/server/
41. Ye X, Singh S. A soa approach to DDoS attacks. In: Proceedings of the IEEE international conference on web services (ICWS 2007), 2007. pp. 567-574.