Active network based DDoS defense

Proceedings - DARPA Active Networks Conference and Exposition, DANCE 2002

Volumn , Issue , 2002, Pages 193-203

  Sterne, D ^a   Djahandari, K ^a   Balupari, R ^a   La Cholter, W ^a   Babson, B ^a   Wilson, B ^a   Narasimhan, P ^a   Purtell, A ^a   Schnackenberg, D ^b   Linden, S ^b  

^a NAI Labs   (United States)

^b BOEING COMPANY   (United States)

Author keywords

Application software; Computer networks; Contracts; Imaging phantoms; Intrusion detection; Mobile computing; Protocols; Prototypes; Software prototyping; Technological innovation

Indexed keywords

ACTIVE NETWORKS; APPLICATION PROGRAMS; COMPUTER NETWORKS; CONTRACTS; INTRUSION DETECTION; MERCURY (METAL); MOBILE COMPUTING; NETWORK PROTOCOLS; NETWORK SECURITY; SOFTWARE PROTOTYPING;

AUTOMATED INTRUSION RESPONSE; DEPLOYMENT SCENARIOS; DISTRIBUTED DENIAL OF SERVICE ATTACK; EXECUTION ENVIRONMENTS; IMAGING PHANTOMS; NETWORK ADMINISTRATION; PROTOTYPES; TECHNOLOGICAL INNOVATION;

DENIAL-OF-SERVICE ATTACK;

EID: 84941153560     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DANCE.2002.1003493     Document Type: Conference Paper

References (29)

1. Anagnostakis, K., Ioannidis, S., Miltchev, S., and Smith, J., "Practical Network Applications on a Lightweight Active Management Environment," Proceedings of the Third International Working Conference on Active Networks, October 2001.
2. Asaka, M., Okazawa, S., Taguchi, A., and Goto, S., "A Method of Tracing Intruders using Mobile Agents," INET'99, June 1999.
3. Calvert, K., "Architectural Framework For Active Networks, Version 1.0," Active Network Working Group, http://www.cc.gatech.edu/projects/canes/papers/arch-1-0.ps.gz
4. CERT® Advisory CA-2000-01 Denial-of-Service Developments, http://www.cert.org/advisories/CA-2000-01.html
5. Chen, E., "AEGIS: An Active-Network-Powered Defense Mechanism against DDoS Attacks," Proceedings of the Third International Working Conference on Active Networks, October 2001.
6. Decasper, D., Dittia, Z., Parulkar, G., and Plattner, B., "Router Plugins: A Software Architecture for Next Generation Routers," Proceedings of SIGCOMM '98, pages 229-240. ACM, September 1998.
7. Frincke, D. and Wilhite, E., "Distributed Network Defense," Proceedings of the 2001 IEEE Workshop on Information Assurance and Security.
8. Harris, S., "Denying Denial-of-Service," Information Security Magazine, September 2001 (http://www.infosecuritymag.com/articles/september 01/cover.shtml).
9. Hicks, M., "PLANet: An Active Internetwork," INFOCOMM'99, pages 1124-1133, New York, IEEE, March 1999.
10. Ioannidis, J., and Bellovin, S., "Implementing Pushback: Router-Based Defense Against DDoS Attacks," Proceedings of the Network and Distributed Systems Security Symposium, February 6-8, 2002, San Diego, CA.
11. The ISI Active Reservation Protocol Project. http://www.isi.edu/active-signal/ARP/index.html
12. Lange, D. and Oshima, M., Programming and Deploying JavaTM Mobile Agents with AgletsTM, Addison-Wesley, 1998.
13. Lindholm, T. and Yellin, F., "The Java Virtual Machine Specification," http://java.sun.com/docs/books/vmspec/. Palo Alto, CA. Sun Microsystems, April 1999.
14. McCanne, S. and Jacobson, V., "The BSD Packet Filter: A New Architecture for User-Level Packet Capture," Proceedings of the 1993 Winter USENIX Technical Conference, San Diego, CA, January 1993.
15. Murphy, S., Lewis, E., Puga, R., Watson, R., and Yee, R., "Strong Security for Active Networks," Proceedings of the IEEE OpenArch Conference, Anchorage, AK, April 2001.
16. Netfilter, http://netfilter.samba.org
17. Nygren, E., "PAN: A High-Performance Active Network Node Supporting Multiple Code Systems," 2nd Conference on Open Architectures and Network Programming, pages 78-89, New York. IEEE, March 1999.
18. The PIRF Project, http://pirfir.sourceforge.net
19. Peterson, L., "NodeOS Interface Specification," Active Network Node OS Working Group, http://www.cs.princeton.edu/nsg/papers/nodeos.ps
20. Peterson, L., Gottlieb, Y., Hibler, M, Tullmann, P., Lepreau, J., Schwab, S., Dandekar, H., Purtell, A., and Hartman, J., "An OS Interface for Active Routers," IEEE Journal on Selected Areas of Communication, New York. March 2001.
21. Schnackenberg, D., Djahandari, K., and Sterne, D., "Infrastructure for Intrusion Detection and Response," Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000.
22. Schnackenberg, D., Holliday, H., Smith, R., Djahandari, K., and Sterne, D., "Cooperative Intrusion Traceback and Response Architecture (CITRA)," Proceedings of the Second DARPA Information Survivability Conference and Exposition (DISCEX II), Anaheim, CA, June 2001.
23. Schwartz, B., Zhou, W., Jackson, A., Strayer, W., Rockwell, D., and Partridge, C., "Smart Packets for Active Networks," 2nd Conference on Open Architectures and Network Programming, New York. IEEE, March 1999.
24. Sterne, D., "Active Networks Intrusion Detection and Response (AN-IDR)," presentation at DARPA Fault Tolerant Networks Program Principal Investigators Meeting, Honolulu, HI, July 20, 2000, http://www.iaands.org/FTN/NAI-Sterne.ppt
25. Sterne, D., Djahandari, K., Wilson, B., Babson, B., Schnackenberg, D., Holliday, H., and Reid, T., "Autonomic Response to Distributed Denial of Service Attacks," Proceedings of the Recent Advances in Intrusion Detection (RAID), Davis, CA, October 2001.
26. Tennenhouse, D. and Wetherall, D., "Active Networks," 15th Symposium on Operating Systems Principles, ACM, December 1995.
27. Van, V., "A Defense Against Address Spoofing Using Active Networks," Masters Thesis, Massachusetts Institute of Technology, May 1997.
28. Wetherall, D., Guttag, J., and Tennenhouse, D., "ANTS: A Toolkit for Building and Dynamically Deploying Network Protocols," IEEE OPENARCH'98, San Francisco, IEEE, April 1998.
29. Zander, J. and Forchheimer, R., "SOFTNET: An Approach to High Level Packet Communication," Proceedings of AMRAD Conference, San Francisco, CA, 1983.