Interest flooding attack and countermeasures in named data networking

2013 IFIP Networking Conference, IFIP Networking 2013

Volumn , Issue , 2013, Pages

  Afanasyev, Alexander ^a   Mahadevan, Priya ^b   Moiseenko, Ilya ^a   Uzun, Ersin ^b   Zhang, Lixia ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b PALO ALTO RESEARCH CENTER   (United States)

Author keywords

denial of service; Information centric networks; named data networking

Indexed keywords

DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; EFFECTIVE SOLUTION; FLOODING ATTACKS; INFORMATION-CENTRIC; NAMED DATA NETWORKINGS; NAMED-DATA NETWORKING; PROPOSED FUTURE INTERNETS;

INTERNET; NETWORK SECURITY;

FLOODS;

EID: 84890852576     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (36)

1. V. Jacobson et al., "Networking named content, " in Proc. of CoNEXT, 2009.
2. L. Zhang et al., "Named data networking (NDN) project, " NDN Project, Tech. Rep. NDN-0001, October 2010.
3. Arbor networks, "Worldwide infrastructure security report, " http://www.arbornetworks.com/research/infrastructure-security-report, Volume VII, 2011.
4. J. Mirkovic and P. Reiher, "A taxonomy of DDoS attack and DDoS defense mechanisms, " CCR, vol. 34, no. 2, pp. 39-53, 2004.
5. C. Yi, A. Afanasyev, L. Wang, B. Zhang, and L. Zhang, "Adaptive forwarding in named data networking, " CCR, vol. 42, no. 3, pp. 62-67, July 2012.
6. C. Yi, A. Afanasyev, I. Moiseenko, L. Wang, B. Zhang, and L. Zhang, "A case for stateful forwarding plane, " Computer Communications: Information-Centric Networking, Special Issue, 2013.
7. A. Afanasyev, N. Tilley, P. Reiher, and L. Kleinrock, "Host-to-host congestion control for TCP, " IEEE Comm. Surveys and Tutorials, vol. 12, no. 3, July 2010.
8. S. Floyd and V. Jacobson, "Link-sharing and resource management models for packet networks, " IEEE/ACM Transactions on Networking, vol. 3, no. 4, pp. 365-386, 1995.
9. J. Ioannidis and S. M. Bellovin, "Implementing pushback: Router-based defense against DDoS attacks, " in Proc. of NDSS Symposium, 2002.
10. A. Afanasyev, I. Moiseenko, and L. Zhang, "ndnSIM: NDN simulator for NS-3, " NDN Project, Tech. Rep. NDN-0005, 2012.
11. N. Spring, R. Mahajan, and D. Wetherall, "Measuring ISP topologies with rocketfuel, " CCR, vol. 32, no. 4, pp. 133-145, 2002.
12. T. Lauinger, "Security & scalability of content-centric networking, " Master Thesis, TU Darmstadt, 2010.
13. M. Ẅahlisch, T. C. Schmidt, and M. Vahlenkamp, "Backscatter from the data plane-threats to stability and security in information-centric networking, " arXiv preprint arXiv:1205.4778, 2012.
14. P. Gasti, G. Tsudik, E. Uzun, and L. Zhang, "DoS & DDoS in Named- Data Networking, " arXiv preprint arXiv:1208.0952, 2012.
15. C. Yi, A. Afanasyev, I. Moiseenko, L. Wang, B. Zhang, and L. Zhang, "A case for stateful forwarding plane, " NDN, Tech. Rep. NDN-0002, 2012.
16. N. Rozhnova and S. Fdida, "An effective hop-by-hop interest shaping mechanism for CCN communications, " in Proc. of INFOCOM WKSHPS, 2012, pp. 322-327.
17. Y. Chen, K. Hwang, and W. Ku, "Collaborative detection of DDoS attacks over multiple network domains, " IEEE Transactions on Parallel and Distributed Systems, vol. 18, no. 12, pp. 1649-1662, 2007.
18. J. Jun, H. Oh, and S. Kim, "DDoS flooding attack detection through a step-by-step investigation, " in Proc. of NESEA, 2011.
19. U. Tupakula and V. Varadharajan, "A practical method to counteract denial of service attacks, " in Proc. of Australasian computer science conference, 2003, pp. 275-284.
20. K. Argyraki and D. Cheriton, "Active internet traffic filtering: Real-time response to denial-of-service attacks, " USENIX, 2005.
21. G. Oikonomou, J. Mirkovic, P. Reiher, and M. Robinson, "A framework for a collaborative DDoS defense, " in Proc. of ACSAC, 2006.
22. X. Liu, X. Yang, and Y. Lu, "To filter or to authorize: Network-layer DoS defense against multimillion-node botnets, " in CCR, vol. 38, no. 4, 2008, pp. 195-206.
23. J. Chou, B. Lin, S. Sen, and O. Spatscheck, "Proactive surge protection: A defense mechanism for bandwidth-based attacks, " IEEE/ACM Transactions on Networking, vol. 17, no. 6, pp. 1711-1723, 2009.
24. X. Liu, X. Yang, and Y. Xia, "Netfence: preventing internet denial of service from inside out, " in Proc. of SIGCOMM, 2010.
25. R. Stone, "CenterTrack: An IP overlay network for tracking DoS floods, " in Proc. of USENIX Security Symposium, vol. 9, 2000, pp. 199-212.
26. A. Keromytis, V. Misra, and D. Rubenstein, "SOS: An architecture for mitigating DDoS attacks, " IEEE Journal on Selected Areas in Communications, vol. 22, no. 1, pp. 176-188, 2004.
27. E. Kline, A. Afanasyev, and P. Reiher, "Shield: DoS filtering using traffic deflecting, " in Proc. of ICNP, 2011.
28. A. Yaar, A. Perrig, and D. Song, "SIFF: A stateless internet flow filter to mitigate DDoS flooding attacks, " in Proc. of Symposium on Security and Privacy, 2004.
29. X. Yang, D. Wetherall, and T. Anderson, "A DoS-limiting network architecture, " CCR, vol. 35, no. 4, pp. 241-252, 2005.
30. D. Wendlandt, D. Andersen, and A. Perrig, "Fastpass: Providing firstpacket delivery, " Tech. Rep., 2006.
31. M. Natu and J. Mirkovic, "Fine-grained capabilities for flooding DDoS defense using client reputations, " in Proce. of LSAD, 2007.
32. B. Parno, A. Perrig, D. Wendlandt, B. Maggs, E. Shi, and Y. chun Hu, "Portcullis: Protecting connection setup from denial-of-capability attacks, " in Proc. of the SIGCOMM, 2007.
33. T. Anderson, "Preventing internet denial-of-service with capabilities, " CCR, vol. 34, no. 1, p. 2004, 2003.
34. H. Wang, D. Zhang, and K. Shin, "Detecting SYN flooding attacks, " in Proc. of INFOCOM, 2002.
35. C. Kreibich, A. Warfield, J. Crowcroft, S. Hand, and I. Pratt, "Using packet symmetry to curtail malicious traffic, " in Proc. of HotNets, 2005.
36. A. Mahimkar, J. Dange, V. Shmatikov, H. Vin, and Y. Zhang, "dFence: Transparent network-based denial of service mitigation, " in NSDI, 2007.