NDLI: Portcullis: protecting connection setup from denial-of-capability attacks

Please wait, while we are loading the content...

Ethane: taking control of the enterprise

Revealing skype traffic: when randomness plays with you

Reconciling performance and programmability in networking systems

Accurate and efficient SLA compliance monitoring

In search for an appropriate granularity to model routing policies

A data-oriented (and beyond) network architecture

Reliability as an interdomain service

A study of prefix hijacking and interception in the internet

How dynamic are IP addresses?

Cloud control with distributed rate limiting

Understanding and mitigating the impact of RF interference on 802.11 networks

Towards highly reliable enterprise network services via inference of multi-level dependencies

Bubblestorm: resilient, probabilistic, and exhaustive peer-to-peer search

Supercharging planetlab: a high performance, multi-application, overlay network platform

Lottery trees: motivational deployment of networked systems

Resolving inter-domain policy disputes

An end-middle-end approach to connection establishment

Achieving convergence-free routing using failure-carrying packets

A light-weight distributed scheme for detecting ip prefix hijacks in real-time

Observing the evolution of internet as topology

Emulating AQM from end hosts

Embracing wireless interference: analog network coding

Automating cross-layer diagnosis of enterprise wireless networks

Securing internet coordinate embedding systems

ProgME: towards programmable network measurement

Can internet video-on-demand be profitable?

Trading structure for randomness in wireless opportunistic routing

CONMan: a step towards network manageability

Etherfuse: an ethernet watchdog

Portcullis: protecting connection setup from denial-of-capability attacks

Orbis: rescaling degree correlations to generate annotated internet topologies

Structured streams: a new transport abstraction

PPR: partial packet recovery for wireless networks

An axiomatic basis for communication

DTN routing as a resource allocation problem

Portcullis: protecting connection setup from denial-of-capability attacks

Content Provider	ACM Digital Library
Author	Perrig, Adrian Wendlandt, Dan Shi, Elaine Hu, Yih-Chun Maggs, Bruce Parno, Bryan
Abstract	Systems using capabilities to provide preferential service to selected flows have been proposed as a defense against large-scale network denial-of-service attacks. While these systems offer strong protection for established network flows, the Denial-of-Capability (DoC) attack, which prevents new capability-setup packets from reaching the destination, limits the value of these systems. Portcullis mitigates DoC attacks by allocating scarce link bandwidth for connection establishment packets based on per-computation fairness. We prove that a legitimate sender can establish a capability with high probability regardless of an attacker's resources or strategy and that no system can improve on our guarantee. We simulate full and partial deployments of Portcullis on an Internet-scale topology to confirm our theoretical results and demonstrate the substantial benefits of using per-computation fairness.
Starting Page	289
Ending Page	300
Page Count	12
File Format	PDF
ISBN	9781595937131
DOI	10.1145/1282380.1282413
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-08-27
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Network capability Per-computation fairness
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Portcullis: Protecting connection setup from denial-of-capability attacks (2007)

Portcullis: protecting connection setup from denial-of-capability attacks

Portcullis: Protecting connection setup from denial-of-capability attacks (2007)

Portcullis:protecting connection setup from denial-of-capability attacks

Protecting a Network from Spoofing and Denial of Service Attacks

Protecting web servers from distributed denial of service attacks

ABSTRACT Protecting Electronic Commerce From Distributed Denial-of-Service Attacks

Protecting electronic commerce from distributed denial-of-service attacks

Protecting Network Quality of Service Against Denial of Service Attacks

Portcullis: protecting connection setup from denial-of-capability attacks

Similar Documents

Portcullis: Protecting connection setup from denial-of-capability attacks (2007)

Portcullis: protecting connection setup from denial-of-capability attacks

Portcullis: Protecting connection setup from denial-of-capability attacks (2007)

Portcullis:protecting connection setup from denial-of-capability attacks

Protecting a Network from Spoofing and Denial of Service Attacks

Protecting web servers from distributed denial of service attacks

ABSTRACT Protecting Electronic Commerce From Distributed Denial-of-Service Attacks

Protecting electronic commerce from distributed denial-of-service attacks

Protecting Network Quality of Service Against Denial of Service Attacks

Portcullis: protecting connection setup from denial-of-capability attacks