Active internet traffic filtering: Real-time response to denial-of-service attacks

USENIX 2005 Annual Technical Conference

Volumn , Issue , 2005, Pages 135-148

  Argyraki, Katerina ^a   Cheriton, David R ^a  

^a STANFORD UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

FILTRATION; NETWORK SECURITY;

ATTACK TRAFFIC; DISTRIBUTED DENIAL OF SERVICE ATTACK; FILTERING MECHANISM; INTERNET TRAFFIC; PRACTICAL SOLUTIONS; REAL TIME RESPONSE;

DENIAL-OF-SERVICE ATTACK;

EID: 85050149881     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. Access list configuration in Cisco’s Gigabit Ethernet Interface. http://www.cisco.com/en/US/products/hw/switches/ps5304/prod_ configuration_guides_list.html.
2. Dartmouth scalable simulation framework. http://www.crhc.uiuc.edu/~jasonliu/projects/ssf/.
3. Route Views Archive. http://archive.routeviews.org/oix-route-views/.
4. SiberCore SCT1842 Features. http://www.sibercore.com/products_siberCAM.htm#3.
5. Sprint backbone data. http://ipmon.sprint.com/packstat/packetoverview.php.
6. SCO Offline from Denial-of-Service Attack. http://www.caida.org/analysis/security/ sco-dos/, December 2003.
7. Attack downs Yahoo, Google. http://news.zdnet.co.uk/internet/security/0, 39020375,39157748,00.htm, June 2004.
8. DDoS Attack Knocks Out DoubleClick Ads. http://www.eweek.com/article2/0,1759,1628340,00.asp, July 2004.
9. SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks. In IEEE Security and Privacy, May 2004.
10. BGP table data. http://bgp.potaroo.net/index-bgp.html, February 2005.
11. Personal communication with Fusun Ertemalp, Distinguished Engineer at Cisco Systems, February 2005.
12. D. G. Andersen. Mayday: Distributed Filtering for Internet Services. In USITS, March 2003.
13. D. J. Bernstein. SYN Cookies. http://cr.yp.to/syncookies.html, 1996.
14. D. Dean, M. Franklin, and A. Stubblefield. An Algebraic Approach to IP Traceback. NDSS, February 2001.
15. L. Gao. On Inferring Autonomous System Relationships in the Internet. In Global Internet, November 2000.
16. A. D. Keromytis, V. Misra, and D. Rubenstein. Secure Overlay Services. In ACM SIGCOMM, August 2002.
17. D. Magoni and J. J. Pansiot. Analysis of the Autonomous System Network Topology. ACM CCR, 31(3):26–37, July 2001.
18. R. Mahajan, S. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Schenker. Controlling High Bandwidth Aggregates in the Network. ACM CCR, 32(3):62–73, July 2002.
19. D. A. Patterson. A simple way to estimate the cost of downtime. In USENIX Systems Administration Conference, November 2002.
20. J. Postel. RFC 791 - Internet Protocol.
21. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical Network Support for IP Traceback. In ACM SIGCOMM, August 2000.
22. S. Staniford, V. Paxson, and N. Weaver. How to 0wn the Internet in Your Spare Time. In USENIX Security, August 2002.
23. A. Yaar, A. Perrig, and D. Song. Pi: A Path Identification Mechanism to Defend against DDoS Attacks. In IEEE Security and Privacy, May 2003.