NDLI: DDoS defense by offense

Please wait, while we are loading the content...

In VINI veritas: realistic and controlled network experimentation

Jigsaw: solving the puzzle of enterprise 802.11 analysis

Capacity overprovisioning for networks with resilience requirements

Realistic and responsive network traffic generation

Source selectable path diversity via routing deflections

Building an AS-topology model that captures route diversity

XORs in the air: practical wireless network coding

SybilGuard: defending against sybil attacks via social networks

Beyond bloom filters: from approximate membership checks to approximate state machines

Virtual ring routing: network routing inspired by DHTs

Quantifying Skype user satisfaction

Humble beginnings, uncertain end: getting the internet to provide performance guarantees

Revisiting IP multicast

Measurement-based models of delivery and interference in static wireless networks

COPE: traffic engineering in dynamic networks

A basic stochastic network calculus

MIRO: multi-path interdomain routing

The impact and implications of the growth in residential user-to-user traffic

Growth codes: maximizing sensor network data persistence

Modeling adoptability of secure BGP protocol

Detecting evasion attacks at high speeds without reassembly

ROFL: routing on flat labels

Enabling contribution awareness in an overlay broadcasting system

Designing DCCP: congestion control without reliability

Interference-aware fair rate control in wireless sensor networks

Systematic topology analysis and generation using degree correlations

Network monitors and contracting systems: competition and innovation

Towards unbiased end-to-end network diagnosis

Understanding the network-level behavior of spammers

Algorithms to accelerate multiple regular expressions matching for deep packet inspection

A measurement study on the impact of routing events on end-to-end internet path performance

Planet scale software updates

Analyzing the MAC-level behavior of wireless networks in the wild

Minimizing churn in distributed systems

The role of PASTA in network measurement

DDoS defense by offense

Policy-based routing with non-strict preferences

Drafting behind Akamai (travelocity-based detouring)

DDoS defense by offense

Content Provider	ACM Digital Library
Author	Walfish, Michael Balakrishnan, Hari Shenker, Scott Karger, David Vutukuru, Mythili
Abstract	This paper presents the design, implementation, analysis, and experimental evaluation of speak-up, a defense against application-level distributed denial-of-service (DDoS), in which attackers cripple a server by sending legitimate-looking requests that consume computational resources (e.g., CPU cycles, disk). With speak-up, a victimized server encourages all clients, resources permitting, to automatically send higher volumes of traffic. We suppose that attackers are already using most of their upload bandwidth so cannot react to the encouragement. Good clients, however, have spare upload bandwidth and will react to the encouragement with drastically higher volumes of traffic. The intended outcome of this traffic inflation is that the good clients crowd out the bad ones, thereby capturing a much larger fraction of the server's resources than before. We experiment under various conditions and find that speak-up causes the server to spend resources on a group of clients in rough proportion to their aggregate upload bandwidth. This result makes the defense viable and effective for a class of real attacks.
Starting Page	303
Ending Page	314
Page Count	12
File Format	PDF
ISBN	1595933085
DOI	10.1145/1159913.1159948
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2006-09-11
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Bandwidth Currency Dos attack
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

DDoS defense by offense

DDoS defense by offense

DDoS Defense by Offense (2006)

Playing Defense by Offense: Equilibrium in the DoS-attack Problem

DDoS Defense by Offense (2006)

Distributed denial of service attack and defense

This DOS Attacks or Denial of Services Attack has

Performance comparison of defense mechanisms against TCP SYN flood DDoS attack

A Taxonomy of DDoS Attack and DDoS Defense Mechanisms (2004)

DDoS defense by offense

Similar Documents

DDoS defense by offense

DDoS defense by offense

DDoS Defense by Offense (2006)

Playing Defense by Offense: Equilibrium in the DoS-attack Problem

DDoS Defense by Offense (2006)

Distributed denial of service attack and defense

This DOS Attacks or Denial of Services Attack has

Performance comparison of defense mechanisms against TCP SYN flood DDoS attack

A Taxonomy of DDoS Attack and DDoS Defense Mechanisms (2004)

DDoS defense by offense