Countering denial-of-service attacks using congestion triggered packet sampling and filtering

Proceedings - International Conference on Computer Communications and Networks, ICCCN

Volumn 2001-January, Issue , 2001, Pages 490-494

  Huang, Yih ^a   Pullen, J M ^a  

^a George Mason University   (United States)

Author keywords

Computer crime; Computer science; Electronic mail; Information filtering; Information filters; Internet; Multiprotocol label switching; Performance analysis; Sampling methods; Traffic control

Indexed keywords

COMPLEX NETWORKS; COMPUTER SCIENCE; DENIAL-OF-SERVICE ATTACK; ELECTRONIC MAIL; ELECTRONIC MAIL FILTERS; INFORMATION FILTERING; INTERNET; NETWORK ARCHITECTURE; TRAFFIC CONTROL; TRANSMISSION CONTROL PROTOCOL;

CONGESTION CONTROL MECHANISM; DENIAL OF SERVICE; MULTI PROTOCOL LABEL SWITCHING; PERFORMANCE ANALYSIS; RESEARCH COMMUNITIES; SAMPLE PROCESSING; SAMPLING METHOD; SIMULATION STUDIES;

COMPUTER CRIME;

EID: 84950296089     PISSN: 10952055     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCCN.2001.956309     Document Type: Conference Paper

References (19)

1. Roger M. Needham, "Denial of service: An example," Communications of the ACM, vol. 37, no. 11, pp. 42-46, November 1994.
2. Lee Garber, "Denial-of-service attacks rip the Internet," IEEE Computer, vol. 33, no. 4, pp. 12-17, April 2000.
3. P. Ferguson and D. Senie, "Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing," Internet RFC 2827, May 2000.
4. D. Senie, "Changing the default for directed broadcasts in routers," Internet RFC 2644, August 1999.
5. "Smurf IP denial-of-service attacks," CERT Advisory CA-98.01, January 1998, available at http://www.cert.org/advisories/CA-98.01.smurf.html.
6. Kimberly C. Claffy, George C. Polyzos, and Hans-Werner Braun, "Applications of sampling methodologies to network traffic characterization," Computer Communication Review, vol. 23, no. 4, pp. 194-203, 1993.
7. Jack Drobisz and Kenneth J. Christensen, "Adaptive sampling methods to determine network traffic statistics including the hurst parameter," in Proceedings of LCN'98, October 1998, pp. 238-247.
8. Glenn Mansfield, Kohei Ohta, Y. Takei, N. Kato, and Y. Nemoto, "Towards trapping wily intruders in the large," Computer Networks, vol. 34, pp. 659-670, 2000.
9. Joao B. D. Cabrera, B. Ravichandran, and Raman K. Mehra, "Statistical traffic modeling for network intrusion detection," in Proceedings. 8th International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems, Woburn, MA, August 2000, pp. 466-473.
10. V. Shah, "Preventing DDoS smurf attacks," Internet draft draft-vshah-ddos-smurf-00.txt, April 2000.
11. Oliver Spatscheck and Larry L. Peterson, "Defending against denial of service attacks in Scout," in Proceedings of the Third Symposium on Operating Systems and Implementations (OSDI '99), New Orleans, LA, February 1999, pp. 59-72.
12. Frank Kargi, Joern Maier, and Michael Weber, "Protecting web servers from distributed denial of service attacks," in Proceedings of the 10th International World Wide Web Conference, Hong Kong, China, May 2001, pp.514-524.
13. D. X. Song and A. Perring, "Advanced and authenticated marking schemes for IP traceback," in Proceedings. IEEE INFOCOM 2001, Anchorage, Alaska, April 2001, pp. 878-886.
14. Kihong Park and Heejo Lee, "On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack," in Proceedings. IEEE INFOCOM 2001, Anchorage, Alaska, April 2001, pp. 338-347.
15. Stefan Savage, David Wetherall, Anna Karlin, and Tom Anderson, "Pratical network support for IP traceback," in Proceedings of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication,, Stockholm Sweden, August 2000, pp. 295-306.
16. Sally Floyd and Kevin Fall, "Prompting the use of end-to-end congestion in the Internet," IEEE/ACM Transcations on Networking, August 1999.
17. Sally Floyd and Van Jacobson, "Random early detection gateways for congestion avoidance," IEEE/ACM Transactions on Networking, vol. 1, no. 4, pp. 397-413, August 1993.
18. A. Hald, Statistical Theory with Engineering Applications, John Wiley & Sons, 1952.
19. Xinjie Chang, "Network simulations with OPNET," in Winter Simulation Conference Proceedings, 1999, vol. 1, pp. 307-314.