Empirical study of tolerating denial-of-service attacks with a proxy network

14th USENIX Security Symposium

Volumn , Issue , 2005, Pages 51-64

  Wang, Ju ^a   Liu, Xin ^a   Chien, Andrew A ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY;

APPLICATION PERFORMANCE; LARGE-SCALE ATTACKS; LARGE-SCALE NETWORK; LARGE-SCALE STUDIES; NETWORK BEHAVIORS; PERFORMANCE PENALTIES; REAL APPLICATIONS; SIMULATED NETWORKS;

DENIAL-OF-SERVICE ATTACK;

EID: 84863168814     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. Keromytis, A.D., V. Misra, and D. Rubenstein. SOS: Secure Overlay Services. in ACM SIGCOMM'02. 2002. Pittsburgh, PA: ACM.
2. Stoica, I., et al. Internet Indirection Infrastructure. in SIGCOMM. 2002. Pittsburge, Pennsylvania USA.
3. Adkins, D., et al., Towards a More Functional and Secure Network Infrastructure. 2003, Computer Science Division, UC Berkeley: Berkeley.
4. Andersen, D.G. Mayday: Distributed Filtering for Internet Services. in 4th Usenix Symposium on Internet Technologies and Systems. 2003. Seattle, Washington.
5. Adkins, D., et al. Taming IP Packet Flooding Attacks. in HotNets-II. 2003.
6. Wang, J., L. Lu, and A.A. Chien. Tolerating Denial-of-Service Attacks Using Overlay Networks ñ Impact of Topology. in 2003 ACM Workshop on Survivable and Self-Regenerative Systems. 2003. Washington DC: ACM.
7. Stavrou, A., et al., WebSOS: An Overlay-based System For Protecting Web Servers From Denial of Service Attacks. Elsevier Journal of Computer Networks, special issue on Web and Network Security, 2005.
8. Wang, J. and A.A. Chien, Understanding When Location-Hiding Using Overlay Networks is Feasible. Elsevier Journal of Computer Networks, special issue on Overlay Distribution Structures and Their Applications, 2005.
9. Liu, X. and A. Chien. Traffic-based Load Balance for Scalable Network Emulation. in SuperComputing 2003. Noverber 2003. Phoenix, Arizona: the Proceedings of the ACM Conference on High Performance Computing and Networking.
10. Liu, X., H. Xia, and A.A. Chien, Validating and Scaling the MicroGrid: A Scientific Instrument for Grid Dynamics. Journal of Grid Computing, 2003.
11. Dittrich, D., The DoS Project's "trinoo" distributed denial of service attack tool. 1999, University of Washington.
12. Dittrich, D., The "Tribe Flood Network" distributed denial of service attack tool. 1999, University of Washington.
13. Dittrich, D., et al., The "mstream" distributed denial of service attack tool. 2000.
14. CERT, "Code Red II:" Another Worm Exploiting Buffer Overflow In IIS Indexing Service DLL. 2001.
15. CERT, "Code Red" Worm Exploiting Buffer Overflow In IIS Indexing Service DLL. 2001.
16. apache, Apache HTTP Server Version 2.0 Documentation.
17. JoeDog.org, http://www.joedog.org/siege/index.php.
18. Akamai, Akamai Technology Overview.
19. Liu, X. and A.A. Chien. Realistic Large-Scale Online Network Simulation. in SuperComputing'04. 2004. Pittsburgh, PA.
20. Medina, A., et al. BRITE: An Approach to Universal Topology Generation. in the International Workshop on Modeling, Analysis and Simulation of Computer and Telecommunications Systems- MASCOTS '01. 2001. Cincinnati, Ohio.
21. Lougheed, K. and Y. Rekhter, RFC 1106: Border Gateway Protocol (BGP). 1990.
22. Moy, J., RFC 2178: OSPF Version 2. 1998.
23. Socolofsky, T. and C. Kale, RFC 1180 - TCP/IP tutorial. 1991.
24. Postel, J., RFC 792 - Internet Control Message Protocol. 1981.
25. Chun, B., et al., PlanetLab: An Overlay Testbed for Broad-Coverage Services. ACM Computer Communications Review, a special issue on tools and technologies for networking research and education, 2003. 33(3).
26. The ns Manual (formerly ns Notes and Documentation), K. Fall and K. Varadhan, Editors, UC Berkeley, LBL, USC/ISI, and Xerox PARC.
27. Faloutsos, M., P. Faloutsos, and C. Faloutsos. On Power-Law Relationships of the Internet Topology. in SIGCOMM'99. 1999.
28. Swany, D.M. and R. Wolski. Data Logistics in Network Computing: The Logistical Session Layer. in IEEE Network Computing and Applications (NCA'01). 2001.
29. Stoica, I., et al. Chord: A Scalable Peer-to-peer Lookup Service for Internet Applications. in ACM SIGCOMM'01. 2001.
30. Loguinov, D., et al. Graph-Theoretic Analysis of Structured Peer-to-Peer Systems: Routing Distances and Fault Resilience. in SIGCOMM. 2003. Karlsruhe, Germany: ACM.
31. Jain, S., R. Mahajan, and D. Wetherall. A Study of the Performance Potential of DHT-based Overlays. in the 4th Usenix Symposium on Internet Technologies and Systems (USITS). 2003. Seattle, WA.
32. Lad, M., et al. An Analysis of BGP Update Burst during Slammer Attack. in Proceedings of the 5th International Workshop on Distributed Computing (IWDC). 2003.
33. Liljenstam, M., et al. Simulating realistic network worm traffic for worm warning system design and testing. in Proceedings of the 2003 ACM workshop on Rapid Malcode. 2003.
34. Mutable Services, New York University.
35. Khattab, S.M., et al. Roaming Honeypots for Mitigating Service-level Denial-of-Service Attacks. in Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04). 2004.