A cooperative mechanism to defense against distributed denial of service attacks

Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on FCST 2011

Volumn , Issue , 2011, Pages 11-20

  Beitollahi, Hakem ^a   Deconinck, Geert ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

Availability; Cooperative Defense; DDoS; Denial of service attacks; Leaky bucket

Indexed keywords

ATTACK PACKETS; ATTACK TRAFFIC; CONTROL PHASE; COOPERATIVE DEFENSE; COOPERATIVE MECHANISMS; CUSTOMER EDGE; DDOS; DDOS ATTACK; DENIAL OF SERVICE ATTACKS; DISTRIBUTED DENIAL OF SERVICE ATTACK; EDGE ROUTERS; LEAKY BUCKETS; LEAKY-BUCKET; TRAFFIC LOADS; TRAFFIC RATE; UPPER BOUND;

AVAILABILITY; BANDWIDTH; CUSTOMER SATISFACTION; EMBEDDED SOFTWARE; EMBEDDED SYSTEMS; INTERNET SERVICE PROVIDERS; NETWORK SECURITY; PACKET NETWORKS; SALES; TRANSMISSION CONTROL PROTOCOL;

COMPUTER CRIME;

EID: 84856150611     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TrustCom.2011.6     Document Type: Conference Paper

References (13)

1. B. Al-Duwairi and G. Manimaran. Victim-Assisted Mitigation Technique for TCP-Based Reflector DDoS Attacks. In Proceedings of 4th International IFIP-TC6 Networking Conference, pages 191-204, May 2005.
2. H. Beitollahi and G. Deconinck. FOSeL: Filtering by helping an Overlay Secure Layer to Mitigate DoS Attacks. In Proceedings of the 7th IEEE Int. Symp. on Network Computing and Applications, 2008.
3. S. Chen and Q. Song. Perimeter-based defense against high bandwidth DDoS attacks. IEEE Transactions on Parallel and Distributed Systems, 16(6):526-537, 2005. (Pubitemid 40889857)
4. D. Dean, M. Franklin, and A. Stubblefield. An algebraic approach to ip traceback. ACM Transactions on Information and System Security, 5(2), May 2002.
5. T. Doeppner, P. Klein, and A. Koyfman. Using Router Stamping to Identify the Source of IP Packets. In Proceedings of the 7th ACM conference on Computer and communications security, 2000.
6. M. Goodrich. Efficient Packet Marking for Large Scale IP Traceback. In Proceedings of the 9th ACM conference on Computer and communications security, pages 117-126, November 2002.
7. R. Mahajan, S. M. Bellovin, and S. Floyd. Controlling high bandwidth aggregates in the network. ACM SIGCOMM Computer Communication Review, 32(3):62-73, 2002.
8. J. Mirkovic and P. Reiher. D-WARD: A Source-End Defense against Flooding Denial-of-Service Attacks. IEEE Transactions on Dependable Computing, 2(3):216-232, July-September 2005.
9. J. Mirkovic, M. Robinson, and P. Reiher. Forming Alliance for DDoS Defenses. In Proceedings of the New Security Paradigmes Workshop, August 2003.
10. S. Savage, D. Wetherall, A. R. Karlin, and T. E. Anderson. Network Support for IP Traceback. IEEE/ACM Transactions on Networking, 9(3):226-237, 2001.
11. M. Sung, J. Xu, J. Li, and L. Li. Large-Sacle IP trace-back in High-Speed Internet: Practical Techniques and Infromation-Theoretic Foundation. IEEE/ACM Transactions on Networking, 16(6), December 2008.
12. J. Wang, L. Lu, and A. Chien. Tolerating denial-of-service attacks using overlay networks-impact of topology. In Proceedings of the ACM Workshop on Survivable and Self-Regenerative Systems, October 2003.
13. D. Y. Yau, J. C. S. Lui, F. Liang, and Y. Yam. Defending against Distributed Denial-of-Service Attacks with Max-Min Fair Server-Centric Router Throttles. IEEE/ACM Transactions on Networking, 13(1):29-42, February 2005.