ComputingComputer ScienceComputer SystemsComputer NetworksComputer SecurityNetwork SecurityCommunication Network ProtectionDenial-of-service AttacksInternet Protocol SecurityInternet Protocol SuiteNetwork Protocol VulnerabilitiesNetwork ProtocolsAttack MitigationDenial Of ServiceDenial Of Service Attack MitigationDenial Of Service ProtectionDenial-of-service MitigationDistributed Denial Of ServiceProtocol Stack DesignWorm Communication Protocols
Since the Morris worm was unleashed in 1988, distributed denial-of-service (DDoS) attacks via worms and viruses have continued to periodically disrupt the Internet. Client puzzles have been proposed as one mechanism for protecting protocols against denial of service attacks. In this paper, we argue that such puzzles must be placed within the slim waistline of the TCP/IP protocol stack in order to truly provide protection. We then describe several scenarios in which TCP/IP puzzles could be used to thwart port scans and coordinated DDoS attacks. Finally, while puzzles hold the promise of being able to change the Internet landscape, we describe a large number of open research issues that must be resolved before such a vision can be achieved.
25
Jitendra Padhye, Victor Firoiu, Don Towsley et al. · 1998 · 2.1K citations
Lawrence S. Brakmo, Sean O’Malley, Larry Peterson · ACM SIGCOMM Computer Communication Review · 1994 · 1.2K citations · Full text
How to Own the Internet in Your Spare Time
Stuart Staniford, Vern Paxson, Nicholas Weaver · 2002 · 1.1K citations
S. Athuraliya, Steven H. Low, V.H. Li et al. · IEEE Network · 2001 · 1K citations