Low-Rate TCP-Targeted DoS Attack Disrupts Internet Routing

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2007

Volumn , Issue , 2007, Pages

  Zhang, Ying ^a   Mao, Z Morley ^a   Wang, Jia ^b  

^a UNIVERSITY OF MICHIGAN   (United States)

^b AT T Labs Research   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; DENIAL-OF-SERVICE ATTACK; GATEWAYS (COMPUTER NETWORKS); NETWORK SECURITY; ROUTING PROTOCOLS; TRANSMISSION CONTROL PROTOCOL; WIDE AREA NETWORKS;

DENIALOF- SERVICE ATTACKS; GLOBAL IMPACTS; GLOBAL INTERNET; INTERDOMAIN ROUTING; INTERNET INFRASTRUCTURE; INTERNET ROUTING; LOW RATES; REACHABILITY; ROUTING TRAFFIC; ROUTING-PROTOCOL;

BORDER GATEWAY PROTOCOL;

EID: 85060085357     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (50)

1. clockdiff. http://www.linuxforum.com/man/clockdiff.8.php.
2. GNU Zebra-routing software. http://www.zebra. org.
3. RIS Raw Data. http://www.ripe.net/projects/ris/rawdata.html.
4. Schooner User-Configurable Lab Environment. http://www.schooner.wail.wisc.edu/index.php3?stayhome=1.
5. University of Oregon Route Views Archive Project. http://www.routeview.org.
6. A. Akella, S. Seshan, and A. Shaikh. An Empirical Evaluation of Wide-Area Internet Bottlenecks. In Proc. Internet Measurement Conference , 2003.
7. J. Aldridge and A. Vural. A first look at Saturday’s MS-SQL worm as seen by BGP activity recorded by RIS project. RIPE 44 Meeting, January 2003.
8. P. Almquist. Type of Service in the Internet Protocol Suite. RFC 1349, July 1992.
9. K. G. Anagnostakis, M. Greenwald, and R. S. Ryger. Measuring Network-internal Delays using only Existing Infrastructure. In Proc. IEEE INFOCOM, 2003.
10. G. Appenzeller, I. Keslassy, and N. McKeown. Sizing Router Buffers. In Proc. ACM SIGCOMM, 2004.
11. G. Appenzeller, N. McKeown, J. Sommers, and P. Barford. Recent Results on Sizing Router Buffers. In Network Systems Design Conference, 2004.
12. S. M. Bellovin and E. R. Gansner. Using Link Cuts to Attack Internet Routing. ATT Research, Tech. Rep., 2004.
13. H. Burch and B. Cheswick. Tracing Anonymous Packets to Their Approximate Source. 2000.
14. Y. Chen, Y.-K. Kwok, and K. Hwang. Filtering Shrew DDoS Attacks Using A New Frequency-Domain Approach. In Proc. IEEE LCN Workshop on Network Security, 2005.
15. Cisco Systems. Weighted Random Early Detection (WRED), 1998.
16. Cisco Systems. NSA/SNAC Router Security Configuration Guide, 2001.
17. Cisco Systems. BGP Nonstop Forwarding (NSF) Awareness, 2005.
18. Cisco Systems. Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS-Based Cisco Products, 2005.
19. Cisco Systems. Configuring Committed Access Rate, 2005.
20. Cisco Systems. Class-Based Policing, 2006.
21. J. Cowie, A. Ogielski, and B. Premore. Internet Worms and Global Routing Instabilities. In Proc. SPIE, 2002.
22. S. Floyd and V. Jacobson. Random Early Detection gateways for Congestion Avoidance. IEEE/ACM Transactions on Networking, 1993.
23. V. Gill, J. Heasley, and D. Meyer. The Generalized TTL Security Mechanism (GTSM). RFC 3682, February 2004.
24. N. Hu, L. E. Li, Z. M. Mao, P. Steenkiste, and J. Wang. A Measurement Study of Internet Bottlenecks. In Proc. IEEE INFOCOM, 2005.
25. Juniper Networks. Best common practices for hardening the infrastructure, 2002.
26. S. Kent, C. Lynn, and K. Seo. Secure Border Gateway Protocol (Secure-BGP). IEEE J. Selected Areas in Communications, 2000.
27. A. Kuzmanovic and E. W. Knightly. Low-Rate TCP-Targeted Denial of Service Attacks (The Shrew vs. the Mice and Elephants). In Proc. ACM SIGCOMM, 2003.
28. C. Labovitz, A. Ahuja, and F. Jahanian. Experimental Study of Internet Stability and Wide-Area Network Failures. In Proc. International Symposium on Fault-Tolerant Computing, June 1999.
29. C. Labovitz, R. Malan, and F. Jahanian. Internet routing stability. IEEE/ACM Trans. Networking, 6(5):515–528, October 1998.
30. X. Luo and R. K. C. Chang. On a New Class of Pulsing Denial-of-Service Attacks and the Defense. In Proc. Network and Distributed System Security Symposium, 2005.
31. R. Mahajan, S. Floyd, and D. Wetherall. Controlling High-Bandwidth Flows at the Congested Router. In Proc. International Conference on Network Protocols, 2001.
32. R. Mahajan, N. Spring, D. Wetherall, and T. Anderson. User-level Internet Path Diagnosis. In Proc. ACM Symposium on Operating Systems Principles, 2003.
33. Z. M. Mao, J. Rexford, J. Wang, and R. Katz. Towards an Accurate AS-level Traceroute Tool. In Proc. ACM SIGCOMM, 2003.
34. J. Ng. Extensions to BGP to Support Secure Origin BGP (soBGP). IETF Draft: draft-ng-sobgp-bgp-extensions-01.txt, November 2002.
35. Nmap–Network Mapper. http://www.insecure.org/nmap/.
36. J. Padhye and S. Floyd. Identifying the TCP Behavior of Web Servers. In Proc. ACM SIGCOMM, 2001.
37. V. N. Padmanabhan and L. Subramanian. An Investigation of Geographic Mapping Techniques for Internet Hosts. In Proc. ACM SIGCOMM, 2001.
38. PlanetLab. http://www.planet-lab.org.
39. Y. Rekhter and T. Li. A Border Gateway Protocol 4 (BGP-4). RFC 1771, March 1995.
40. R. Richmond. Firms Join Forces Against Hackers. Wall Street Journal, March 28, 2005.
41. Ryan McDowell. Implications of Securing Backbone Router Infrastructure. NANOG Meeting, May 2004.
42. S. R. Sangli, Y. Rekhter, R. Fernando, J. G. Scudder, and E. Chen. Graceful Restart Mechanism for BGP. IETF Internet Draft, June 2004.
43. A. Shaikh, L. Kalampoukas, R. Dube, and A. Varma. Routing Stability in Congested Networks: Experimentation and Analysis. In Proc. ACM SIGCOMM, 2000.
44. A. Shevtekar, K. Anantharam, and N. Ansari. Low Rate TCP Denial-of-Service Attack Detection at Edge Routers. IEEE Communications Letters, April 2005.
45. N. Spring, R. Mahajan, and D. Wetherall. ISP Topologies with Rocketfuel. In Proc. ACM SIGCOMM, 2002.
46. L. Subramanian, S. Agarwal, J. Rexford, and R. H. Katz. Characterizing the Internet hierarchy from multiple vantage points. In Proc. IEEE INFOCOM, 2002.
47. H. Sun, J. C. Lui, and D. K. Yau. Defending Against Low-rate TCP Attacks: Dynamic Detection and Protection. In Proc. International Conference on Network Protocols, 2004.
48. F. Wang, L. Gao, J. Wang, and J. Qiu. On Understanding of Transient Interdomain Routing Failures. In Proc. International Conference on Network Protocols, 2006.
49. L. Wang, D. Massey, K. Patel, and L. Zhang. FRTR: A Scalable Mechanism for Global Routing Table Consistency. In Proc. International Conference on Dependable Systems and Networks , 2004.
50. L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S. F. Wu, and L. Zhang. Observation and Analysis of BGP Behavior under Stress. In Proc. ACM SIGCOMM Internet Measurement Workshop, 2002.