ICMP based IP traceback with negligible overhead for highly distributed reflector attack using bloom filters

Computer Communications

Volumn 42, Issue , 2014, Pages 60-69

  Saurabh, S ^a   Sairam, A S ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY PATNA   (India)

Author keywords

Bloom filter; Denial of service attack; Distributed reflector attack; IP traceback; Reverse iTrace

Indexed keywords

BLOOM FILTERS; DENIAL OF SERVICE ATTACKS; DISTRIBUTED REFLECTORS; IP TRACEBACK; REVERSE ITRACE;

DATA STRUCTURES;

REFLECTION;

EID: 84900613991     PISSN: 01403664     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comcom.2014.01.003     Document Type: Article

References (27)

1. Vern Paxson An analysis of using reflectors for distributed denial-of-service attacks ACM SIGCOMM Comput. Commun. Rev. 31 2001 38 47
2. Wei Wei, Feng Chen, Yingjie Xia, and Guang Jin A rank correlation based detection against distributed reflection DoS attacks Comput. Commun. 2013 1 3
3. Martin Husk, and Martin Vizvry Reflected attacks abusing honeypots Proceedings of the 2013 ACM SIGSAC Conference on Computer Communications Security 2013 ACM 1449 1452
4. P. Arun, Raj Kumar, and S. Selvakumar Detection of distributed denial of service attacks using an ensemble of adaptive and hybrid neuro-fuzzy systems Comput. Commun. 2012
5. E. Kline, M. Beaumont-Gay, J. Mirkovic, P. Reiher, RAD: reflector attack defense using message authentication codes, in: Proceedings of Computer Security Applications Conference, 2009, pp. 269-278.
6. Basheer Al-Duwairi, and G. Manimaran Distributed packet pairing for reflector based DDoS attack mitigation Comput. Commun. 29 2006 2269 2280
7. T. Hiroshi, K. Ohta, A. Yamamoto, N. Ansari, Y. Waizumi, and Y. Nemoto Detecting DRDoS attacks by a simple response packet confirmation mechanism Comput. Commun. 31 14 2008 3299 3306
8. Sasu Tarkoma Christian Esteve Rothenberg and Eemil Lagerspetz, theory and practice of bloom filters for distributed systems IEEE Commun. Surv. Tutorials 14 1 2012 131 155
9. R. Bhoraskar, V. Gabale, P. Kulkarni, D. Kulkarni, Importance-aware bloom filter for managing set membership queries on streaming data, in: Proceedings of Fifth International Conference on Communication Systems and Networks (COMSNETS), 2013, pp. 1-10.
10. Ori Rottenstreich, and Isaac Keslassy The bloom paradox: when not to use a bloom filter? INFOCOM, Proceedings of IEEE 2012 IEEE 1638 1646
11. Yossi Gilad, and Amir Herzberg LOT: a defense against IP spoofing and flooding attacks ACM Trans. Inf. Syst. Secur. (TISSEC) 15 2 2012 6
12. Izaddoost Alireza, Mohamed Othman, and Mohd Fadlee A. Rasid Accurate ICMP traceback model under DoS/DDoS attack International Conference on Advanced Computing and Communications, ADCOM 2007 2007 IEEE
13. C. Barros, A proposal for ICMP traceback messages, 2000. Available from: .
14. Jin Yu, Nick Duffield, Jeffrey Erman, Patrick Haffner, Subhabrata Sen, and Zhi-Li Zhang A modular machine learning system for flow-level traffic classification in large networks ACM Trans. Knowl. Discovery Data (TKDD) 6 1 2012 4
15. Yousra Chabchoub, Christine Fricker, Fabrice Guillemin, and Philippe Robert On the statistical characterization of flows in Internet traffic with application to sampling Comput. Commun. 33 1 2010 103 112
16. Callado Arthur, Carlos Kamienski, Gza Szab, B. Gero, Judith Kelner, Stłnio Fernandes, and Djamel Sadok A survey on Internet traffic identification IEEE Commun. Surv. Tutorials 11 2009 37 52
17. Z. Shi, D. Ionescu, and D. Zhang A token based method for congestion and packet loss control IEEE Lat. Am. Trans. 11 2 2013 802 811
18. Samant Saurabh, and Ashok Singh Sairam Linear and remainder packet marking for fast IP traceback 2012 Fourth International Conference on Communication Systems and Networks (COMSNETS) 2012 IEEE 1 8
19. Alex C. Snoeren, Craig Partridge, Luis A. Sanchez, Christine E. Jones, Fabrice Tchakountio, Stephen T. Kent, and W. Timothy Strayer Hash-based IP traceback ACM SIGCOMM Comput. Commun. Rev. ACM 31 2001 3 14
20. Andrey Belenky, and Nirwan Ansari IP traceback with deterministic packet marking IEEE Commun. Lett. 7 2003 162 164
21. Haining Wang, Jin Cheng, and Kang G. Shin Defense against spoofed IP traffic using hop-count filtering IEEE/ACM Trans. Networking (TON) 15 1 2007 40 53
22. Andrei Broder, and Michael Mitzenmacher Network applications of bloom filters: a survey Internet Math. 1 4 2004 485 509
23. N. Brownlee, and K. Claffy Understanding Internet traffic streams: dragonflies and tortoises IEEE Commun. Mag. 40 10 2002 110 117
24. Deng Fan, and Davood Rafiei Approximately detecting duplicates for streaming data using stable bloom filters Proceedings of the 2006 ACM SIGMOD International Conference on Management of Data 2006 ACM 25 36
25. Belenky Andrey, and Nirwan Ansari On deterministic packet marking Comput. Networks 51 2007 2677 2700
26. Gateway Link Trace, Umass Network Trace Repository, 2005. Available from: .
27. Binomial Distribution. Available from: .