The rising tide: DDoS from defective designs and defaults

2nd Workshop on Steps to Reducing Unwanted Traffic on the Internet, SRUTI 2006

Volumn , Issue , 2006, Pages 1-6

  Clayton, Richard ^a  

^a UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY;

CONSUMER MARKET; DESIGN DEFECTS; DISTRIBUTED DENIAL OF SERVICE ATTACK; NETWORK TIME PROTOCOL; SECURE SYSTEM;

DENIAL-OF-SERVICE ATTACK;

EID: 84947710696     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. S. Alexander, R. Droms: DHCP Options and BOOTP Vendor Extensions. RFC2132, IETF, 1997.
2. N. Brownlee, kc claffy, E. Nemeth: DNS Measurements at a Root Server. IEEE Global Telecommunications Conference, 2001, (GLOBECOM'01), 25-29 Nov 2001, vol 3, pp. 1672-1676.
3. Division of Information Technology, University of Wisconsin - Madison: Serendipity and hard work pay off. 21 Apr 2004. http://www.doit.wisc.edu/news/story.asp?filename=322
4. Common Vulnerabilities and Exposure (CVE) List: Denial of service in Qmail by specifying a large number of recipients with the RCPT command. Candidate (under review) CVE-1999-0144. 7 Jun 1999.
5. P. B. Danzig, K. Obrackza, A. Kumar: An Analysis of Wide-Area Name Server Traffic: A study of the Internet Domain Name System. ACM SIGCOMM Computer Communication Review, 22(4), Oct 1992, pp. 281-292.
6. S. Desai: Re: FAQ: Netscape Communications and our products. comp.infosystems.www.misc, 14 Jan 1995. http://groups.google.com/group/comp.infosystems.www.misc/msg/e194375a44e90ea8
7. Dynamic Network Services Inc.: User-Agent Block: client/1.0. 31 Oct 2005. http://www.dyndns.com/about/company/notify/archives/useragent block client10.html
8. D. Gibson: Why we have abandoned the UltiMeth domain. Sep 2003. http://www.ultimeth.com/Abandon.html
9. HPCwire: Network Devices Almost Take Down Atomic Clock. 11 Jul 2003. http://www.taborcommunications.com/hpcwire/hpcwireWWW/03/0711/105537.html
10. Internet Systems Consortium Inc.: Stratum One Time Servers. http://ntp.isc.org/bin/view/Servers/StratumOneTimeServers
11. E. Kohler, M. Handley, S. Floyd: Problem Statement for the Datagram Congestion Control Protocol (DCCP). RFC4336, IETF, Mar 2006.
12. R. Malda: Forget Napster & Gnutella: Enter Mojo Nation. 9 Oct 2000. http://slashdot.org/article.pl?sid=00/10/09/1826243
13. D. Malone: Unwanted HTTP: who has the time. Usenix;login 31(2), Apr 2006.
14. D. Mills: Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI. RFC4330, IETF, Jan 2006.
15. National Research Council Committee on Internet Navigation and the Domain Name System: Signposts in Cyberspace. National Academies Press, Sep 2005, ISBN: 0-309-09640-5.
16. D. Plonka: Flawed Routers Flood University of Wisconsin Internet Time Server. 21 Aug 2003. http://www.cs.wisc.edu/∼plonka/netgear-sntp/
17. B. Wilcox-O'Hearn: Experiences Deploying a Large-Scale Emergent Network. in: P. Druschel, F. Kaashoek, A. Rowstron (Eds.): Peer-to-peer Systems, First International Workshop, IPTPS 2002, Cambridge MA, USA, Mar 2002, pp. 104-110.
18. M. Wouters: Re: Improved monlist scheme - a bit off topic. ntp:hackers mailing list, 15 Sep 2003. http://lists.ntp.isc.org/pipermail/hackers/2003-September/000326.html