On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack

By Heejo Lee, Kihong Park. Proceedings IEEE INFOCOM 2001. Conference on Computer Communications. Twentieth Annual Joint Conference of the IEEE Computer and Communications Society (Cat. No.01CH37213), 2001

463 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Hardware and Architecture

View Paper: https://www.semanticscholar.org/paper/3fa2479feffc286a88257e4d3e313fe973ebba87

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

1. Kang G. Shin
2. Haining Wang
3. C. Leckie
4. Adrian Perrig
5. Dawn Song
6. Danlu Zhang
7. Abraham Yaar
8. Peter L. Reiher

In Computer Networks and Communications

1. Adrian Perrig
2. Kang G. Shin
3. Haining Wang
4. C. Leckie
5. Dawn Song
6. Danlu Zhang
7. Abraham Yaar
8. Lixia Zhang

In Hardware and Architecture

1. Dawn Song
2. Adrian Perrig
3. Abraham Yaar
4. Kang G. Shin
5. Peter L. Reiher
6. C. Leckie
7. Aikaterini Mitrokotsa
8. Kotagiri Ramamohanarao

Citations in the corpus

• Survey of network-based defense mechanisms countering the DoS and DDoS problems (2007, background): “Simulation results show that a signi.cant fraction of spoofed IP addresses can be .ltered if RPF is implemented in at least 18% of ASs in the Internet [Park and Lee 2001b].”
• Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles (2005, background): “The analysis in [15] confirms the remark in [16] that their form of IP traceback may not be highly effective for distributed DoS attacks.”
• Detecting SYN flooding attacks (2002, background): “They have to rely on the expensive IP traceback [2], [21], [25], [28], [29], [34] to locate the flooding sources.”
• SIFF: a stateless Internet flow filter to mitigate DDoS flooding attacks (2004, background): “Several researchers propose to embed traceback information within the IP packet [2, 12, 19, 26, 35, 38, 43].”
• SAVE: source address validity enforcement protocol (2002, background): “Tracing becomes ineffective when the volume of attack traffic is s mall or the a ttack is distributed [ 12 ].”
• DDoS attacks and defense mechanisms: classification and state-of-the-art (2004, methodology): “We propose a classification of DDoS attacks that combines efficiently the classifications proposed by Mirkovic et al. [31], Lee [32] and more recent research results.”