Traffic redirection attack protection system (TRAPS)

IFIP Advances in Information and Communication Technology

Volumn 181, Issue , 2005, Pages 309-325

  Thing, Vrizlynn L L ^a,b   Lee, Henry C J ^b   Sloman, Morris ^a  

^a IMPERIAL COLLEGE LONDON   (United Kingdom)

^b INSTITUTE FOR INFOCOMM RESEARCH   (Singapore)

Author keywords

Adaptive Security; Attack Response System; Distributed Denial of Service

Indexed keywords

INTERNET PROTOCOLS; NETWORK SECURITY; UBIQUITOUS COMPUTING; SECURITY OF DATA; TRANSMISSION CONTROL PROTOCOL;

ADAPTIVE SECURITY; AUTOMATIC RESPONSE; DISTRIBUTED DENIAL OF SERVICE; MITIGATION SCHEMES; MOBILE IP PROTOCOL; PROTECTION SYSTEMS; RESPONSE SYSTEMS; TRAFFIC REDIRECTIONS;

DENIAL-OF-SERVICE ATTACK;

EID: 84885086200     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/0-387-25660-1_21     Document Type: Conference Paper

References (26)

1. K. J. Houle, G. M. Weaver, "Trends in Denial of Service Attack Technology", CERT Coordination Center, Oct. 2001
2. L. Garber, "Denial-of-Service attacks rip the Internet", IEEE Computer, Vol. 33, No. 4, pp. 12-17, Apr. 2000
3. David Moore, Geoffrey M. Voelker, Stefan Savage, "Inferring Internet Denial-of-Service Activity", Usenix Security Symposium, Aug. 2001
4. Alex C. Snoeren et al, "Hash-Based IP Traceback", ACM Sigcomm 2001, Aug. 2001
5. Stefan Savage et al, "Practical network support for IP traceback", ACM Sigcomm 2000
6. Dawn Song, Adrian Perrig, "Advanced and authenticated marking scheme for IP traceback", IEEE Infocom 2001
7. K. Park, H. Lee, "On the Effectiveness of Probabilistic Packet Marking for IP Traceback under Denial of Service Attack", IEEE Infocom 2001
8. Steve Bellovin et al, "ICMP Traceback Messages", IETF Internet Draft, Version 4, Feb. 2003 (Work in progress)
9. Allison Mankin et al, "On Design and Evaluation of "Intention-Driven" ICMP Traceback", IEEE International Conference on Computer Communication and Networks, Oct. 2001
10. Henry C. J. Lee, Vrizlynn L. L. Thing, Yi Xu, Miao Ma, "ICMP Traceback with Cumulative Path, An Efficient Solution for IP Traceback, International Conference on Information and Communications Security, Oct. 2003
11. Abraham Yaar, Adrian Perrig, Dawn Song, "Pi: A Path Identification Mechanism to Defend against DDoS Attacks", IEEE Symposium on Security and Privacy, May 2003
12. D. Dean, M. Franklin, A. Stubblefield, "An algebraic approach to IP Traceback", Network and Distributed System Security Symposium, Feb. 2001
13. P. Ferguson, D. Senie, "Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing", BCP 38, RFC 2827, May 2000
14. Jun Li et al, "SAVE: Source address validity enforcement protocol", IEEE Infocom 2002
15. Ratul Mahajan et al, "Controlling High Bandwidth Aggregates in the Network", ACM Sigcomm 2002
16. T. Darmohray, R. Oliver, "Hot spares for DDoS attacks", http://www.usenix.org/pub1ications/login/2000-7/apropos.html
17. Mazu Enforcer, http://www, mazunetworks.com
18. A. D. Keromytis, V. Misra, D. Rubenstein, "SOS: Secure Overlay Services", ACM Sigcomm 2002
19. J. Yan, S. Early, R. Anderson, "The Xeno Service-A Distributed Defeat for Distributed Denial of Service", Information Survivability Workshop 2000, Oct. 2000
20. C. Perkins, "IP Mobility Support for I Pv"IE TF RFC 3344, Aug. 2002
21. D. Johnson, C. Perkins, J. Arkko, "Mobility Support in IPv"IE TF RFC 3775, June 2004
22. MIPL Mobile IPv6 for Linux, http://www.mipl.mediapoli.com
23. C. Perkins, D. B. Johnson, "Route Optimization in Mobile IP", IETF Internet Draft, Version 9, Feb. 2000 (Work in progress)
24. H. Krawczyk, M. Bellare, R. Canetti, "HMAC: Keyed-Hashing for Message Authentication", RFC 2104, Feb. 1997
25. S. Kent, R. Atkinson, "Security Architecture for the Internet Protocol", RFC 2401, Nov. 1998
26. Aurobindo Sundaram, "An Introduction to Intrusion Detection", ACM Crossroads, Vol. 2, Issue 4, pp. 3-7, Apr. 1996