AS-Based accountability as a cost-effective DDoS defense

1st Workshop on Hot Topics in Understanding Botnets, HotBots 2007

Volumn , Issue , 2007, Pages

  Simon, Daniel R ^a   Agarwal, Sharad ^a   Maltz, David A ^a  

^a MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNET; COST EFFECTIVENESS; INTERNET SERVICE PROVIDERS; NETWORK SECURITY;

COST EFFECTIVE; DISTRIBUTED DENIAL OF SERVICE ATTACK; ECONOMIC COMPETITIVENESS; ECONOMICALLY VIABLE; INCOMING TRAFFIC; INGRESS FILTERING; OVER PROVISIONING; SIMPLE APPROACH;

DENIAL-OF-SERVICE ATTACK;

EID: 85093874083     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. D. P. Anderson, J. Cobb, E. Korpela, M. Lebofsky, and D. Werthimer. SETI@home: An experiment in public-resource computing. Communications of the ACM, 45(11), November 2002.
2. T. Anderson, T. Roscoe, and D. Wetherall. Preventing Internet denial-of-service with capabilities. In Proc. ACM HotNets-II, November 2003.
3. K. Argyraki and D. Cheriton. Active internet traffic filtering: Real-time response to denial-of-service attacks. In USENIX, 2005.
4. H. Ballani, Y. Chawathe, S. Ratnasamy, T. Roscoe, and S. Shenker. Off by default! In Proc. ACM HotNets-IV, November 2005.
5. S. Bellovin. The security flag in the IPv4 header. RFC 3514, 2003.
6. J. Binkley and S. Singh. An algorithm for anomaly-based botnet detection. In Proc. Usenix Workshop on Steps to Reducing Unwanted Traffic on the Internet, 2006.
7. S. Blake, D. Black, M. Carlson, E. Davies, and Z. W. W. Weiss. An architecture for differentiated services. RFC 2475, 1998.
8. CNET Shopper prices for Cisco Guard XT 5650. http://shopper.cnet.com/Cisco Guard XT 5650 security - appliance/4014-3243 9-31208569.html.
9. CNET Shopper prices for Cisco Traffic Anomaly Detector XT 5600. http://shopper.cnet.com/Cisco Traffic Anomaly Detector-XT 5600 security appliance/4014-3243 9-31208808.html.
10. E. Cooke, F. Jahanian, and D. McPherson. The zombie roundup: Understanding, detecting, and disrupting botnets. In Proc. Usenix Workshop on Steps to Reducing Unwanted Traffic on the Internet, 2005.
11. S. D. Crocker. Protecting the Internet from distributed denial-of-service attacks: A proposal. Proceedings of the IEEE, 92(9):1375-1381, September 2004.
12. Reply comments of Leap Wireless. WT Docket No. 01-184, October 2001.
13. Reply Comments of Sprint PCS. WT Docket No. 01-184, October 2001. http://gullfoss2.fcc.gov/prod/ecfs/retrieve.cgi?native or pdf=pdf&id document=6512767909.
14. P. Ferguson and D. Senie. Network ingress filtering: Defeating denial of service attacks that employ IP source address spoofing. Internet RFC 2827, 2000.
15. F. Freiling, T. Holz, and G. Wicherski. Botnet tracking: Exploring a root-cause methodology to prevent distributed denial-of-service attacks. In Computer Security - ESORICS 2005: 10th European Symposium on Research in Computer Security, 2005.
16. C. Garretson. Savvis launches security service. Network World, December 2005. http://www.networkworld.com/news/2005/121905savvis.html.
17. A. Helland. The economics of large-scale data transfer: the benefits of fibre channel and SONET for high-performance, cost-effective data transport through WAN - storage networking. Computer Technology Review, December 2002.
18. J. Ioannidis and S. M. Bellovin. Implementing pushback: Router-based defense against DDoS attacks. In Proc. ISOC Symp. on Network and Distributed Systems Security, 2002.
19. S. Kandula, D. Katabi, M. Jacob, and A. Burger. Botz-4-sale: Surviving DDoS attacks that mimic flash crowds. In NSDI, 2005.
20. S. Kent and R. Atkinson. Security architecture for the internet protocol. Internet RFC 2401, 1998.
21. J. Layden. Phatbot arrest throws open trade in zombie PCs. The Register, May 2004. http://www.theregister.co.uk/2004/05/12/phatbot zombie trade/.
22. Leap investor relations website. http://phx.corporateir.net/phoenix.zhtml?c=95536&p=irol-irhome.
23. R. A. Mortimer. Investment and cooperation among internet backbone firms. UC Berkeley Economics, 2001. PhD Dissertation.
24. K. Nichols, S. Blake, F. Baker, and D. Black. Definition of the differentiated services field (DS field) in the IPv4 and IPv6 headers. RFC 2474, 1998.
25. U. C. B. Office. Economic and Budget Issue Brief, February 2004. http://www.cbo.gov/showdoc.cfm?index=5082&sequence=0.
26. D. Pappalardo. MCI offers network protection service. Network World, June 2005. http://www.networkworld.com/news/2005/060605-mci-security.html.
27. V. Paxson. An analysis of using reflectors for distributed denial-of-service attacks. ACM CCR, 31(3), July 2001.
28. A. Ramachandran, N. Feamster, and D. Dagon. Revealing botnet membership using dnsbl counter-intelligence. In Proc. Usenix Workshop on Steps to Reducing Unwanted Traffic on the Internet, 2006.
29. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In ACM SIGCOMM, August 2000.
30. J. Stewart. BGP4: Inter-Domain Routing in the Internet. Addison-Wesley, 1998.
31. T1-shopper.com prices for Verio connectivity. http://www.t1shopper.com/carriers/verio/.
32. R. Vogt, J. Aycock, and M. Jacobson. Army of botnets. In Proc. ISOC Symp. on Network and Distributed Systems Security, 2007.
33. A. Yaar, A. Perrig, and D. Song. Pi: A path identification mechanism to defend against DDoS attacks. In Proc. IEEE Symposium on Security and Privacy, May 2003.
34. A. Yaar, A. Perrig, and D. Song. SIFF: a stateless internet flow filter to mitigate DDoS flooding attacks. In Proc. IEEE Symposium on Security and Privacy, May 2004.
35. X. Yang, D. Wetherall, and T. Anderson. A DoS-limiting network architecture. In ACM SIGCOMM, August 2005.