MAfIc: Adaptive packet dropping for cutting malicious flows to push back DDoS attacks

Proceedings - International Conference on Distributed Computing Systems

Volumn , Issue , 2005, Pages

  Chen, Yu ^a   Kwok, Yu Kwong ^a   Hwang, Kai ^a  

^a UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

Author keywords

DDoS defense; Duplicated ACKs; Malicious flows; Packet dropping policy; Probing

Indexed keywords

DENIAL-OF-SERVICE ATTACK; DROPS; NETWORK SECURITY;

DDOS ATTACK; DDOS DEFENSE; DROPPING POLICY; DUPLICATED ACK; MALICIOUS ATTACK; MALICIOUS FLOW; NEW APPROACHES; PACKET DROPPING; PACKET DROPPING POLICY; PROBING;

PACKET LOSS;

EID: 80052201538     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCSW.2005.84     Document Type: Conference Paper

References (18)

1. H. Aljifri, “IP Traceback: A New Denial-of- Service Deterrent,” IEEE Security and Privacy Magazine, May/June 2003, pp. 24-31.
2. M. Cai, Y. Chen, Y.-K. Kwok, and K. Hwang, “A Scalable Set-Union Counting Approach to Pushing Back DDoS Attacks,” USC GridSec Technical Report TR-2004-21, Oct. 2004.
3. M. Durand and P. Flajolet, “LogLog Counting of Large Cardinalities,” Proc. European Symposium on Algorithms 2003.
4. P. Ferguson and D. Senie, “Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing,” IETF RFC 2827, May 2000.
5. S. Floyd, M. Handley, J. Padhye, and J. Widmer, “Equation-Based Congestion Control for Unicast Applications,” Proc. ACM SIGCOMM 2000.
6. A. Hussain, J. Heidemann, and C. Papadopoulos, “A Framework for Classifying Denial of Service Attacks,” Proc. ACM SIGCOMM 2003.
7. K. Hwang, Y. Chen, and H. Liu, “Defending Distributed Systems against Malicious Intrusions and Network Anomalies,” Proc. of the 1st International Workshop on Systems and Network Security (SNS 2005), in conjunction with IPDPS 2005, Apr. 2005.
8. J. Ioannidis and S. M. Bellovin, “Implementing Pushback: Router-Based Defense Against DDoS Attacks,” Proc. NDSS 2002.
9. Y. Kim, W. C. Lau, M. C. Chuah, and H. J. Chao, “PacketScore: Statistics-Based Overload Control Against Distributed Denial-of-Service Attacks,” Proc. INFOCOM 2004.
10. M. Kodialam, T. V. Lakshman, and W. C. Lau, “High-speed Traffic Measurement and Analysis Methodologies and Protocols,” Bell Labs Technical Memo, Aug. 2004.
11. Y. K. Kwok, R. Tripathi, Y. Chen, and K. Hwang, “HAWK: Halting Anomalies with Weighted Choking to Rescue Well-Behaved TCP Sessions from Shrew DoS Attacks,” submitted to the International Conference on Computer Networks and Mobile Computing (ICCNMC 2005), Feb. 2005.
12. K.-C. Lan, A. Hussain, and D. Dutta, “The Effect of Malicious Traffic on the Network,” Proc. PAM 2003, April 2003.
13. J. Mirkovic and P. Reiher, “A Taxonomy of DDoS Attack and DDoS Defence Mechanisms,” ACM Computer Communications Review, vol. 34, no. 2, Apr. 2004.
14. D. Moore, G. M. Voelker, and S. Savage, “Inferring Internet Denial-of-Service Activity,” Proc. USENIX Security 2001.
15. Network Simulator 2 (NS-2), http://www.isi.edu/nsnam/ns/, 2005.
16. K. Park and H. Lee, “On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets,” Proc. ACM SIGCOMM 2001.
17. P. Pradhan, T. Chiueh, and A. Neogi, “Aggregate TCP Congestion Control Using Multiple Network Probing,” Proc. ICDCS 2000.
18. SANS Web Pages, “Egress Filtering,” http://www.sans.org/y2k/egress.htm, Feb. 2000.