Detecting Forged TCP Reset Packets

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2009

Volumn , Issue , 2009, Pages

  Weaver, Nicholas ^a   Sommer, Robin ^b   Paxson, Vern ^c  

^a ICSI

^b ICSI LBNL

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; COMPUTER VIRUSES; PEER TO PEER NETWORKS; VIRUSES;

ANTI-SPAM; ANTI-VIRUS MECHANISM; MULTIPLE COMPONENTS; NETWORK OPERATOR; NUMBER OF SOURCES; OUT OF BAND; P2P APPLICATIONS; SPECTRA'S; THIRD PARTIES; TRAFFIC CONTROL DEVICES;

TRANSMISSION CONTROL PROTOCOL;

EID: 85180628784     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (28)

1. Martin Arlitt and Carey Williamson. An Analysis of TCP Reset Behaviour on the Internet. SIGCOMM Comput. Com-mun. Rev., 35(1):37–44, 2005.
2. BitTorrent, www.bittorrent.com.
3. Don Bowman. Private communication.
4. Anne Broache. AT&T: We Don’t Throttle P2P Traffic. http://news.cnet.com/8301-107843-9929158-7.html?part=rss&subj=news&tag= 2547-1 3-0-5.
5. Richard Clayton, Steven Murdoch, and Robert Watson. Ignoring the Great Firewall of China. In 6th Workshop on Privacy Enhancing Technologies, 2006.
6. Comcast Corporation: Description of Current Network Management Practices. http://downloads.comcast.net/docs/Attachment A Current Practices. pdf.
7. Comments of Comcast Comporation. http://fjallfoss.fcc.gov/prod/ecfs/retrieve. cgi?native or pdf=pdf&id document= 6519840991.
8. Jedidiah R. Crandall, Daniel Zinn, Michael Byrd, Earl Barr, and Rich East. ConceptDoppler: A Weather Tracker for Internet Censorship. In 14th ACM Conference on Computer and Communication Security (CCS), 2007.
9. Marcel Dischinger, Alan Mislove, Andreas Haeberlen, and Krishna P. Gummadi. Detecting BitTorrent Blocking. In Internet Measurement Conference, 2008.
10. EFF “Test Your ISP” Project. http://www.eff.org/ testyourisp.
11. Ernesto. Comcast Throttles BitTorrent Traffic, Seeding Impossible. http://torrentfreak.com/comcast-throttles-bittorrent-traffic-seeding-impossible.
12. James Fallows. The Connection Has Been Reset. Atlantic Monthly, March 2008.
13. FCC Announces Public En Banc Hearing in Cambridge, MA on Broadband Network Management Practices, http://hraunfoss.fcc.gov/edocs public/ attachmatch/DOC-280194A1.pdf.
14. A. Heffernan. RFC 2385: Protection of BGP Sessions via the TCP MD5 Signature Option, 1998.
15. Laurent Joncheray. A Simple Active Attack Against TCP. In Proceedings of the 5th Usenix Security Symposium, 1995.
16. Eddie Kohler, Robert Morris, Benjie Chen, John Jannotti, and M. Frans Kaashoek. The Click modular router. ACM Transactions on Computer Systems, 18(3):263–297, 2000.
17. MaxMind GeoIP Address Location Technology. http://www.maxmind.com/app/ip-location.
18. Cade Metz. Cox Pulls a Comcast with eDonkey, http://www.theregister.co.uk/2007/11/20/cox bagging edonkey swaps/.
19. Vern Paxson. Bro: A System for Detecting Network Intruders in Real-Time. Computer Networks, 31(23–24):2435–2463, 1999.
20. Jon Postel. RFC 793 - Transmission Control Protocol, 1981.
21. A. Ramaiah, R. Stewart, and M. Dalal. Improving TCP’s Robustness to Blind In-Window Attacks. Internet-Draft, http://tools.ietf.org/html/ draft-ietf-tcpm-tcpsecure-09, 2008.
22. Sandvine Intelligent Traffic Management, http://www.sandvine.com/solutions/p2p policy mngmt. asp.
23. Umesh Shankar and Vern Paxson. Active Mapping: Resisting NIDS Evasion Without Altering Traffic. In Proc. IEEE Symposium on Security and Privacy, 2003.
24. The Snort IDS, www.snort.org.
25. ∼dugsong/dsniff.
26. Broadband Network Management, http://systems.cs.colorado.edu/mediawiki/index.php/ Broadband Network Management.
27. First Results from Vuze Network Monitoring Tool, http://cache2.vuze.com/docs/ internet future/First Results from Vuze Network Monitoring Tool.pdf.
28. Paul A. Watson. Slipping in the Window: TCP Reset Attacks. Presentation at 2004 CanSecWest, http://cansecwest.com.