Implementing Pushback: Router-Based Defense Against DDoS Attacks

By John Ioannidis, Steven M. Bellovin. Network and Distributed System Security Symposium, 2002

673 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Hardware and Architecture

View Paper: https://www.semanticscholar.org/paper/cc7d233c0db6e85f968880f4f15326882dac6712

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Hardware and Architecture

Citations in the corpus

Change-point monitoring for the detection of DoS attacks (2004, methodology): “The router-based mitigation systems include Distributed Packet Filtering (DPF) [40], Ingress Filtering [14], Pushback [25], [35], Rate Throttling [61], and SAVE [33].”
DDoS attacks and defense mechanisms: classification and state-of-the-art (2004, background): “According to [68], a pushback daemon determines whether there is an indication of any attacks by running a detection algorithm.”
SIFF: a stateless Internet flow filter to mitigate DDoS flooding attacks (2004, background): “propose Aggregate Congestion Control (ACC)/Pushback, which leverages router support to rate-limit groups of similar packets responsible for congestion, and push filters upstream towards the sources of those packets to preserve network bandwidth [22, 27].”
Defense Against Spoofed IP Traffic Using Hop-Count Filtering (2007, methodology): “Through analysis using network measurement data, we show that HCF can identify close to 90% of spoofed IP packets, and then discard them with little collateral damage.”
Controlling high bandwidth aggregates in the network (2002, methodology): “A technique to incrementally deploy pushback is presented in [19]; a prototype implementation can be found in [15].”
Preventing Internet denial-of-service with capabilities (2004, background): “To address this limitation, some researchers have proposed adding network support for dynamic traffic filters, called pushback [11, 7 ]. Although the pushback proposals to date have focused on controlling link bandwidth floods, in theory any host or resource on the Internet could use dynamic pushba”
Pi: a path identification mechanism to defend against DDoS attacks (2003, methodology): “For example, the Pushback system [15, 20] uses downstream routers that identify aggregates (packets from one or more flows that have certain characteristics, such as source or destination addresses) and send rate-limit requests to upstream routers, along with an aggregate identifier.”
Adversarial attacks against intrusion detection systems: Taxonomy, solutions and open issues (2013, background): “the automatic set up of firewalls or routers rules [70], [71], to keep malicious traffic from reaching the monitored hosts.”
Differential privacy for collaborative security (2010, background): “Exploring connections between our framework and known mitigation techniques such as pushback [ 18 ] may be valuable.”
A framework for classifying denial of service attacks (2003, methodology): “Response mechanism usually take two approaches; localizing the source of the attack using traceback techniques [8, 16 , 34, 35], or reducing the intensity of the attack [22, 18, 44] by blocking attack packets.”
Amplification Hell: Revisiting Network Protocols for DDoS Abuse (2014, background): “Ioannidis and Bellovin proposed Pushback [10], in which upstream routers collaborate to drop undesired packets.”