CenterTrack: An IP overlay network for tracking DoS floods

Proceedings of the 9th USENIX Security Symposium

Volumn , Issue , 2000, Pages

  Stone, Robert ^a  

^a UUNET Technologies

Author keywords

[No Author keywords available]

Indexed keywords

DENIAL-OF-SERVICE ATTACK; FLOODS; HIGH SPEED NETWORKS; OVERLAY NETWORKS;

DENIAL OF SERVICE; DIAGNOSTIC FUNCTIONS; EDGE ROUTERS; FLOOD ATTACKS; HIGH CAPACITY; INGRESS EDGE ROUTERS; IP PROTOCOL; PACKET FORWARDING;

INTERNET PROTOCOLS;

EID: 85084163540     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. Steven M. Bellovin. Security Problems in the TCP/IP Protocol Suite. Computer Communications Review, 9(2):32-48, April 1989.
2. P. Ferguson and D. Senie. Network Ingress Filtering: Defeating Denial of Service Attacks Which Employ IP Source Address Spoofing. RFC 2267, January 1998.
3. Computer Emergency Response Team. CERT Advisory CA-96.26: Denial-of-Service Attack via pings. http://www.cert.org/advisories/CA-96.26.ping.html, December 1996.
4. Computer Emergency Response Team. CERT Advisory CA-98.01: "smurf" IP Denial-of-Service Attacks. http://www.cert.org/advisories/CA-98.01.smurf.html, January, 1998.
5. Craig A. Huegen. The Latest in Denial of Service Attacks: "Smurfing". http://users.quadrunner.com/chuegen/smurf.cgi. February, 2000.
6. Computer Emergency Response Team. CERT Advisory CA-96.21: TCP SYN Flooding and IP Spoofing Attacks. http://www.cert.org/advisories/CA-96.21.tcp-syn-flooding.html. August, 1998.
7. Computer Emergency Response Team. Results of the Distributed-Systems Intruder Tools Workshop. http://www.cert.org/reports/dsit-workshop-final.html. November 1999.
8. S. Hanks, T. Li, D. Farinacci, and P. Traina. Generic Routing Encapsulation. RFC 1701, October 1994.
9. S. Hanks, T. Li, D. Farinacci, D. Meyer, and P. Traina. Generic Routing Encapsulation. RFC 2784, March 2000.
10. Y. Rekhter and T. Li. A Border Gateway Protocol 4 (BGP-4). RFC 1771, March 1995.
11. Christian Huitema. Routing in the Internet. Prentice Hall, 1995.
12. Bassam Halabi. Internet Routing Architectures. New Rider's Publishing, 1997.
13. Intermediate system to Intermediate system intra-domain routeing information exchange protocol for use in conjunction with the protocol for providing the connectionless-mode Network Service. ISO DP 10589, International Standards Organization, 1992.
14. R. Callon. Use of OSI IS-IS for Routing in TCP/IP and Dual Environments. RFC 1195, December 1990.
15. Hal Burch and Bill Cheswick. Tracing Anonymous Packets to their Approximate Source. Unpublished paper, December 1999.
16. Stefan Savage, David Wetherall, Anna Karlin, and Tom Anderson. Practical Network Support for IP Traceback. To appear in SIGCOMM 2000, Stockholm, Sweden, July 2000.
17. Steven M. Bellovin. ICMP Traceback Messages. IETF Internet Draft, draft-bellovinitrace-00.txt, March 2000. (Expires September 2000).
18. N. Brownlee, C. Mills, and G. Ruth. Traffic Flow Measurement: Architecture. RFC 2063, January 1997.
19. cflowd. http://www.caida.org/Tools/Cflowd/
20. Glenn Sager. Security Management in Next Generation Networks, a presentation. PICS, July 1998. http://www.caida.org/NGI/Security/0798/
21. Glenn Sager. Security Fun with OCxmon and cflowd, a presentation. PICS, at the Internet2 Working Group meeting, November 1998. http://www.caida.org/NGI/Security/1198/
22. J. Apisdorf, k. claffy [sic] (NLANR), and K. Thompson. OC3MON: Flexible, Affordable, High-Performance Statistics Collection. MCI/vBNS and NLANR, Internet Society INET '97, January 1997.
23. J. Moy. OSPF Version 2. RFC 2328, April 1998.
24. S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. RFC 2401, November 1998.
25. S. Kent and R. Atkinson. IP Authentication Header. RFC 2402, November 1998.