Preventing DDoS attacks by identifier/locator separation

IEEE Network

Volumn 27, Issue 6, 2013, Pages 60-65

  Luo, Hongbin ^a   Lin, Yi ^a   Zhang, Hongke ^a   Zukerman, Moshe ^b  

^a BEIJING JIAOTONG UNIVERSITY   (China)

^b CITY UNIVERSITY OF HONG KONG   (Hong Kong)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNETS; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE ATTACK; IDENTIFIER-TO-LOCATOR MAPPINGS; IDENTIFIER/LOCATOR SEPARATIONS; NUMERICAL RESULTS; SCALING PROBLEM;

SEPARATION;

NETWORK SECURITY;

EID: 84890481146     PISSN: 08908044     EISSN: None     Source Type: Journal    
DOI: 10.1109/MNET.2013.6678928     Document Type: Article

References (12)

1. J. Mirkovic, P. Reiher, "A Taxonomy of DDoS Attack and DDoS Defense Mechanisms," ACM SIGCOMM Computer Commun. Rev., vol. 34, no. 2, April 2004, pp. 39-53
2. S. Yu et al., "Traceback of DDoS Attacks Using Entroy Variations," IEEE Trans. Parallel and Distributed Systems, vol. 22, no. 3, Mar. 2011, pp. 412-25.
3. "IP Flow-Based Technology," ArborNetworks, http://www. arbornetworks.com, 2010.
4. D. Farinacci et al., "Locator/ID Separation Protocol (LISP)," IETF RFC 6830, Jan. 2013.
5. H. Luo, H. Zhang, and M. Zukerman, "Decoupling the Design of Identifierto-Locator Mapping Services from Identifiers," Computer Networks (Elsevier), vol. 55, no. 4, Mar. 2011, pp. 959-74.
6. Trend Micro 2011 Threat Predictions: Mobile Devices and Diversity of Operating Systems Will Expand Cybercriminal Reach, http://trendmicro.mediaroom. com/index.php?s=43&news-item=851&type =archived&year=2010.
7. K. Wang, H. Luo, and Y. Qin, "Identifier/Locator Separation: A Worm Detection and Prevention Perspective," Proc. 2011 Int'l. Conf. Advanced Intelligence and Awareness Internet, Oct. 2011, Shenzhen, China.
8. P. Hick et al., "The CAIDA 'DDoS Attack 2007' Dataset," http://www.caida.org/data/passive/ddos-20070804-dataset.xml.
9. B. E. Brodsky and B. S. Darkhovsky, Nonparametric Methods in Change-Point Problems, Kluwer Academic, 1993.
10. D. Moore et al., "Inferring Internet Denial-of-Service Activity," ACM Trans. Computer Systems, vol. 24, no. 2, May 2006, pp. 115-39.
11. ]. Cisco Locator/ID Separation Protocol Security, http://www.cisco.com/ en/US/prod/collateral/iosswrel/ps6537/ps6554 /ps6599/ps10800/at-a-glance-c45- 645204.pdf.
12. ]. F. K. Ghalati, "Defending Against Distributed Denial of Service Attack Under Tunnel based Forwarding," Master Thesis, Aalto University, Aug. 2011.