IMPROVING THE FUNCTIONALITY OF SYN COOKIES

IFIP Advances in Information and Communication Technology

Volumn 100, Issue , 2002, Pages 57-77

  Zuquete, Andre ^a  

^a INESC ID   (Portugal)

Author keywords

simultaneous connection initiation; SYN cookies; SYN flooding attacks; TCP options

Indexed keywords

FLOODS; TRANSMISSION CONTROL PROTOCOL;

'CURRENT; CURRENT MECHANISMS; LINUX KERNEL; SIMULTANEOUS CONNECTION INITIATION; SYN COOKIE; SYN FLOODING ATTACK; TCP CONNECTIONS; TCP OPTION; THROUGHPUT PERFORMANCE;

COMPUTER OPERATING SYSTEMS;

EID: 85059973976     PISSN: 18684238     EISSN: 1868422X     Source Type: Book Series    
DOI: 10.1007/978-0-387-35612-9_6     Document Type: Chapter

References (15)

1. D. J. Bernstein. SYN cookies. http://cr.yp.to/syncookies.html.
2. Syn cookies mailing list syncookies-archi ve41koobera. math. uic. edu. http://cr.yp.to/syncookies/archive.
3. J. Postel. Transmission Control Protocol. RFC 793, September 1981. available via DDN Network Center.
4. S. Bellovin. Defending Against Sequence Number Attacks. RFC 1948, May 1996. available via DDN Network Center.
5. P. Ferguson and D. Senie. Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing. RFC 2267, January 1998. available via DDN Network Center.
6. Livio Ricciulli, Patrick Lincoln, and Pankaj Kakkar. TCP SYN Flooding Defense. In Comm. Net. and Dist. Systems Modeling and Simulation Conf. (CNDS' 99), 1999 Western MultiConf. (WMC' 99)" San Francisco, CAL, USA, January 1999.
7. Eric Schenk. Another new thought on TCP SYN attacks, 1996. http://www.wcug.vvu.edu/lists/netdev/199609/msg00116.html.
8. V. Jacobson and R. Braden. TCP Extensions for Long-Delay Paths. RFC 1072, October 1988. available via DDN Network Center.
9. V. Jacobson, R. Braden, and D. Borman. TCP Extensions for High Performance. RFC 1323, May 1992. available via DDN Network Center.
10. R. Braden. Requirements for Internet Hosts-Communication Layers. RFC 1122, October 1989. available via DDN Network Center.
11. Q. Xie, K. Morneault, C. Sharp, H. Schwarzbauer, T. Taylor, I. Rytina, M. Kalla, L. Zhang, and V. Paxson. Stream Control Transmission Protocol. RFC 2960, October 2000. available via DDN Network Center.
12. Fyodor. Remote OS detection via TCP lIP Stack FingerPrinting, October 1998. http://www.insecure.org/nmap/nmap-fingerprinting-article.html.
13. Burak DaylOglu and Attila OZgit. Use of Passive Network Mapping to Enhance Signature Quality of Misuse Network Intrusion Detection Systems. In 16th Int. Symp. on Computer and Information Sciences, November 2001.
14. Honeynet Project. Know Your Enemy: Passive Fingerprinting. White Paper, January 2002. http://project.honeynet. org.
15. Matthew Smart, G. Robert Malan, and Farnam Jahanian. Defeating TCP lIP Stack Fingerprinting. In Pmc. of the 9th USENIX Security Symp., 2000.