IP traceback-based intelligent packet filtering: A novel technique for defending against Internet DDoS attacks

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2002, Pages 302-311

  Sung, Minho ^a   Xu, Jun ^a  

^a Georgia Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DENIAL-OF-SERVICE ATTACK; NETWORK SECURITY;

AFTER-THE-FACT; DISTRIBUTED DENIAL OF SERVICE; INFORMATION CONCERNING; NETWORK EDGES; NOVEL TECHNIQUES; PACKET FILTERING; REAL-WORLD NETWORKS; SECURITY PROBLEMS;

INTERNET PROTOCOLS;

EID: 84904907549     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2002.1181417     Document Type: Conference Paper

References (25)

1. Akamai technologies inc. http://www.akamai.com/.
2. CAIDA's Skitter project web page. Available at http://www.caida.org/ Tools/Skitter/.
3. S. Bellovin. Internet Draft: ICMP Traceback Messages. Technical report, Network Working Group, Mar. 2000.
4. B. Bloom. Space/time trade-offs in hash coding with allowable errors. Communications of the Association for Computing Machinery, 13(7):422-426, 1970.
5. H. Burch and B. Cheswick. Tracing anonymous packets to their approximate source. In Proc. Usenix LISA 2000, Dec. 2000.
6. CERT. TCP SYN flooding and IP spoofing attacks. Advisory CA-96.21, Sept. 1996.
7. B. Cheswick. Internet Mapping. Available at http://cm.belllabs. com/who/ches/map/dbs/index.html, 1999.
8. D. Dean, M. Franklin, and A. Stubblefield. An algebraic approach to ip traceback. In Proc. NDSS 2001, pages 3-12, Feb. 2001.
9. T. Doeppner, P. Klein, and A. Koyfman. Using router stamping to identify the source of IP packets. In Proc. ACM CCS-7, pages 184-189, Nov. 2000.
10. P. Ferguson. Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing. RFC 2267, Jan. 1998.
11. L. Garber. Denial-of-Service attacks rip the Internet. IEEE Computer, 33(4):12-17, Apr. 2000.
12. J. Howard. An Analysis of Security Incidents on the Internet. PhD thesis, Carnegie Mellon University, Aug. 1998.
13. C. Inc. TCP SYN Flooding Attack and the FireWall-1 SYNDefender. Available at http://www.checkpoint.com/products/firewall-1/syndefender.html, 1997.
14. A. Juels and J. Brainard. Client puzzles: A cryptographic countermeasure against connection depletion attacks. In Proc. of NDSS'99. Internet Society, Mar. 1999.
15. F. Kargl, J.Maier, S. Schlott, and M.Weber. Protecting Web Servers from Distributed Denial of Service Attacks. In WWW-10, May 2001.
16. P. Karn and W. Simpson. Photuris: Session-Key Management Protocol. IETF RFC 2522, Mar. 1999.
17. R. Mahajan, S. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling high bandwidth aggregates in the network. Technical report, ACIRI and AT&T Labs Research, Feb. 2001.
18. K. Park and H. Lee. On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets. In Proc. ACM Sigcomm'2001, Aug. 2001.
19. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proc. ACM SIGCOMM 2000, pages 295-306, Aug. 2000.
20. C. Schuba et al. Analysis of a Denial of Service Attack on TCP. In Proceedings of the 1997 IEEE Symposium on Security and Privacy. IEEE Computer Society Press, 1997.
21. A. Snoeren, C. Partridge, et al. Hash-Based IP Traceback. In Proc. ACM Sigcomm'2001, Aug. 2001.
22. D. Song and A. Perrig. Advanced and Authenticated Marking Schemes for IP Traceback. In Proc. Infocom 2001, Apr. 2001.
23. M. Sung and J. Xu. Ip traceback-based intelligent packet filtering: A novel technique for defending against internet ddos attacks. Technical Report GIT-CC-02-44, College of Computing, Georgia Institute of Technology, Aug. 2002.
24. J. Xu and W. Lee. Sustaining Availability of Web Services under Severe Denial of Service Attacks. IEEE Transaction on Computers, special issue on Reliable Distributed Systems, Feb. 2003. to appear.
25. D. K. Yau, J. C. Lui, and F. Liang. Defending Against Distributed Denial-of-Service Attacks with Max-min Fair Server-centric Router Throttles. In Proc. of IEEE IWQoS, May 2002.