Adaptive use of network-centric mechanisms in cyber-defense

Proceedings - 2nd IEEE International Symposium on Network Computing and Applications, NCA 2003

Volumn , Issue , 2003, Pages 179-188

  Atighetchi, M ^a   Pal, P ^a   Webber, F ^a   Jones, C ^a  

^a BBN TECHNOLOGIES   (United States)

Author keywords

Adaptive systems; Bandwidth; Computer networks; Delay; Floods; Intelligent networks; Monitoring; Protocols; Resilience; Telecommunication traffic

Indexed keywords

ADAPTIVE SYSTEMS; BANDWIDTH; COMPUTER NETWORKS; FLOODS; INTELLIGENT NETWORKS; MONITORING; NETWORK LAYERS; NETWORK PROTOCOLS; NETWORK SECURITY; TELECOMMUNICATION TRAFFIC; TRANSMISSION CONTROL PROTOCOL;

DEFENSE STRATEGY; DEFENSIVE BEHAVIOR; DELAY; DISTRIBUTED SYSTEMS; EXPERIMENTAL EVALUATION; NETWORK-BASED ATTACKS; NETWORK-BASED DEFENSE; RESILIENCE;

COMPUTER CRIME;

EID: 84863914336     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NCA.2003.1201154     Document Type: Conference Paper

References (41)

1. S. Blake et al. An architecture for differentiated services. Technical Report RFC 2475, Internet Engineering Task Force, http://ietf.org/rfc/, Dec. 1998.
2. R. Braden et al. Resource reservation protocol (rsvp) version1 - functional specification. Technical Report RFC 2205, Internet Engineering Task Force, http://ietf.org/rfc/, Sept. 1997.
3. Cougaar home page. http://www.cougaar.org.
4. M. Cukier et al. Providing intrusion tolerance with itua, June 2002.
5. P. Ferguson and D. Senie. Network ingress filtering: Defeating denial of service attacks which employ ip source address spoofing. Technical Report RFC 2827, Internet Engineering Task Force, http://ietf.org/rfc/, May 2000.
6. FreeS/WAN. Free secure wide area network under linux 2.4. http://www.freeswan.org.
7. Hoghwash. http://hoghwash.sourceforge.net.
8. B. Hubert et al. Linux advanced routing and traffic control howto. http://ds9a.nl/2.4Networking/.
9. Internet engineering task force (ietf) ip security charter. http://www.ietf.org/html.charters/ipsec-charter.html.
10. D. Kewley, R. Fink, J. Lowry, and M. Dean. Dynamic approaches to thwart adversary intelligence gathering. In DARPA Info. Survivability Conf. and Expo., May 2001.
11. T. Killalea. Recommended internet service provider security services and procedures. Technical Report RFC 3013, Internet Engineering Task Force, http://ietf.org/rfc/, Nov. 2000.
12. J. Lepanto and W. Weinstein. Contra - camouflage of network traffic to resist attack. In DARPA OASIS PI Meeting, 2002.
13. P. Loscocco and S. Smalley. Integrating flexible support for security policies into the linux operating system. In USENIX Annual Technical Conference, 2001.
14. P. Loscocco and S. Smalley. Meeting critical security objectives with security-enhanced linux. In Ottawa Linux Symposium, 2001.
15. J. Lowry and K. Theriault. Experimentation in the ia program. In DARPA Info. Survivability Conf. and Expo., May 2001.
16. J. Mirkovic, G. Prier, and P. Reiher. Attacking ddos at the source. In IEEE Int'l Conf. on Network Protocols, 2002. to appear.
17. B. Nelson, W. Farrell, M. Atighetchi, J. Clem, L. Sudin, M. Shepard, and K. Theriault. Apod experiment 2 - final report. Technical Report Technical Memorandum 1326, BBN Technologies LLC, Sept. 2002.
18. B. Nelson, W. Farrell, M. Atighetchi, S. Kaufman, L. Sudin, M. Shepard, and K. Theriault. Apod experiment 1 - final report. Technical Report Technical Memorandum 1311, BBN Technologies LLC, May 2002.
19. Netfilter. Firewalling, nat and packet mangling for linux 2.4. http://www.netfilter.org.
20. P. G. Neumann and P. A. Porras. Experience with EMERALD to date. In First USENIX Workshop on Intrusion Detection and Network Monitoring, pages 73-80, Santa Clara, California, apr 1999.
21. K. Nichols, V. Jacobson, and L. Zhang. A two-bit differentiated services architecture for the internet. Technical Report RFC 2638, Internet Engineering Task Force, http://ietf.org/rfc/, July 1999.
22. N. R. G. of the Information and C. S. D. at Lawrence Berkeley National Laboratory. Arpwatch. http://wwwnrg.ee.lbl.gov/.
23. OpenSSH. open-source ssh. http://www.openssh.org.
24. P. Pal, M. Atighetchi, F. Webber, R. Schantz, and C. Jones. Reflections on evaluating survivability: The apod experiments. In IEEE Int'l Symp. on Network Computing and Applications (NCA-03), 2003. submitted.
25. P. Pal, F. Webber, et al. Defense enabling using advanced middleware: An example. In MILCOM, Oct. 2001.
26. P. Pal, F. Webber, J. Zinky, R. Shapiro, and J. Megquier. Using qdl to specify qos aware distributed (quo) application configuration. In IEEE Int'l Symp. Object-Oriented Real-Time Distributed Comp., Mar. 2000.
27. QuO. Quality objects open-source release. http://quo.bbn.com/release/latest.
28. M. Roesch. Snort - lightweight intrusion detection for networks. In USENIX LISA, 1999.
29. R. E. Schantz, J. P. Loyall, M. Atighetchi, and P. P. Pal. Packaging quality of service control behaviors for reuse. In IEEE Int'l Symp. Object-Oriented Real-Time Distributed Comp., Apr. 2002.
30. E. Siever et al. Linux in a Nutshell. O'Reilly, 2000.
31. E. Skoudis. Counter Hack. Prentice Hall PTR, 2002.
32. VMware. http://www.vmware.com.
33. VPNshield. Technology for protecting vpns from denial-of-service (dos) attacks. http://www.atcorp.com/products, 2002.
34. F. Webber, P. Pal, M. Atighetchi, and C. Jones. Apod final report. Technical Report Technical Memorandum, BBN Technologies LLC, Oct. 2002.
35. F. Webber, P. Pal, et al. Defense-enabled applications. In DARPA Info. Survivability Conf. and Expo., May 2001.
36. P. White. RSVP and integrated services in the internet: A tutorial. IEEE Communications Magazine, pages 100-106, May 1997.
37. B. Wood and R. Duggan. Red teaming of advanced information assurance concepts. In DARPA Info. Survivability Conf. and Expo., Jan. 2000.
38. T.-L. Wu et al. Securing QoS: Threats to RSVP messages and their countermeasures. In Int'l Workshop on Quality of Service, June 1999.
39. The zebedee secure ip tunnel homepage. http://www.winton.org.uk/zebedee.
40. J. Zinky, D. Bakken, and R. Schantz. Architectural support for quality of service for CORBA objects. Theory and Practice of Object Systems, 1(3):55-73, Apr. 1997.
41. J. Zinky and R. Shapiro. Adding qos adaptation to component-based middleware. In Int'l Conf. Distributed Comp. Syst., 2003. submitted.