Security Control for Bandwidth Distributed Denial of Service (Bw-D dos) Attacks by FADRB Mechanisms

1 .Y.Gev, M. Geva, and A. Herzberg, “Backward TrafficThrottling to Mitigate Bandwidth Floods,” Global Comm. Conf. (GLOBECOME 12),
IEEE, 2012, pp. 904–910.
2. J.C.Y. Chou et al., “Proactive Surge Protection: A Defense Mechanism for Bandwidth Based Attacks,” IEEE/ACM Trans. Networking,
vol. 17, no. 6, 2009, pp. 1711–1723.
3. X. Yang, D. Wetherall, and T.E. Anderson, “A DoS-Limiting Network Architecture,” Proc. ACM SIGCOMM, 2005, ACM, pp. 241–252.
4. Basavaraj Havale and Prajakta Madankar" Defense Mechanisms for Bandwidth DDoS and Its Issues", International A Hacks Journal
on Recent and Innovation Trends Computing and Communication, Vol 3, isse-3,PP 1432 -1435.
5. D. Andersen. Mayday: Distributed Filtering for Internet Services. In 3rd Usenix USITS, 2003.
6 . T. Anderson, T. Roscoe, and D. Wetherall. Preventing Internet Denial of Service with Capabilities. In Proc. HotNets-II, Nov. 2003.
7. K. Argyraki and D. Cheriton. Active Internet Traffic Filtering: Real-Time Response to Denial-of-Service Attacks. In USENIX 2005, 2005.
8 . A. Demers, S. Keshav, and S. Shenker. Analysis andSimulation of a Fair Queueing Algorithm. In ACM SIGCOMM,1989.
9. P. Druschel and G. Banga. Lazy Receiver Processing (LRP): A Network Subsystem Architecture for Server Systems. In 2nd OSDI, 1996.
10. P. Ferguson and D. Senie. Network Ingress Filtering: Defeating Denial of Service Attacks that Employ IP Source Address Spoofing.
Internet RFC 2827, 2000.
11. M. Handley and A. Greenhalgh. Steps Towards a DoSResistant Internet Architecture. In ACM SIGCOMM Workshop on Future
Directions in Network Architecture (FDNA),2004.
12. J. Ioannidis and S. Bellovin. Implementing Pushback: RouterBased Defense Against DoS Attacks. In NDSS,2002.
13. S. Kandula, D. Katabi, M. Jacob, and A. Berger. Botz-4-sale: Surviving organized DDoS attacks that mimic flash crowds. In 2nd NSDI,
May 2005.
14. A. Keromytis, V.Misra, and D. Rubenstein. SOS: Secure Overlay Services. In ACM SIGCOMM,2002.
15. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek. The Click Modular Router. ACM Transactions on Computer
Systems, 18(3):263–297, Aug.2000.
16. K. Lakshminarayanan, D. Adkins, A. Perrig, and I. Stoica. Taming IP Packet Flooding Attacks. In Proc. HotNets-II,2003.
17. S. Machiraju, M. Seshadri, and I. Stoica. A Scalable and Robust Solution for Bandwidth Allocation . In IWQoS’02,2002.
18 . R. Mahajan, S. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling High Bandwidth Aggregates in the Network.
Computer Communications Review, 32(3), July2002.
19 .A.J.Menezes,P.C.vanOorschot,andS.A.Vanstone. Handbook of applied cryptography, chapter 9. CRC Pres, 1997.
20 . D. Moore, G. Voelker, and S. Savage. Inferring Internet Denial of Service Activity. In Usenix Security Symposium 2001, 2001.
21. A. Snoeren, C. Partridge, L. Sanchez, C. Jones, F. Tchakountio, S. Kent, and W. Strayer. Hash-Based IP Traceback. In ACM
SIGCOMM, 2001.
22. D. Song and A. Perrig. Advance and Authenticated Marking Schemes for IP Traceback. In Proc. IEEE Infocom,2001.
23. I. Stoica, S. Shenker, and H. Zhang. Core-Stateless Fair Queueing: Achieving Approximately Fair Bandwidth Allocations in High
Speed Networks. In ACM SIGCOMM,1998.
24.. A. Yaar, A. Perrig, and D. Song. Pi: A Path Identification Mechanism to Defend Against DDoS Attacks. In IEEE Symposium on
Security and Privacy,2003.
25. A. Yaar, A. Perrig, and D. Song. SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks. In IEEESymposium
on Security and Privacy, 2004.2