Efficient network-based method for defending against SYN-flooding attacks
Abstract: This paper analyzes a network-based denial of service attack for IP (Internet Protocol) based networks. It is popularly called SYN flooding. It works by an attacker sending many TCP (Transmission Control Protocol) connection requests with spoofed source addresses to a victim's machine. Each request causes the targeted host to instantiate data structures out of a limited pool of resources. Once the target host's resources are exhausted, no more incoming TCP connections can be established, thus... (Update)
Cited by: More
On Scalable Attack Detection in the Network - Ramana Rao Kompella (2004)
(Correct)
WebSOS: An Overlay-based System for Protecting Web .. - Stavrou, Cook.. (2005)
(Correct)
A Scalable Set-Union Counting Approach to Pushing Back DDoS.. - Kwok, Cai, Hwang (2004)
(Correct)
Active bibliography (related documents): More All
0.5: Distributed Denial of Service Attacks - Lau, Rubin, Smith, Trajovic (2000)
(Correct)
0.4: Defending against a Denial-of-Service Attack on TCP - Mutaf (1999)
(Correct)
0.2: Issues in the Incorporation of Security Services into a.. - Tripunitara, Spafford
(Correct)
Similar documents based on text: More All
0.4: Inferring Internet Denial-of-Service Activity - Moore, Voelker, Savage (2001)
(Correct)
0.4: TCP SYN Flooding Defense - Ricciulli, Lincoln, Kakkar (1999)
(Correct)
0.3: An Analysis of Using Reflectors for Distributed Denial-of-Service .. - Paxson (2001)
(Correct)
Related documents from co-citation: More All
28: Practical network support for ip traceback
- Savage, Wetherall et al. - 2000
22: Network Ingress Filtering: Defeating Denial of Service Attacks which Employ IP S.. (context) - Ferguson, Senie - 1998
22: A formal framework and evaluation method for network denial of service
- Meadows - 1999
BibTeX entry: (Update)
C. Schuba, I. Krsul, M. Kuhn, G. Spafford, A. Sundaram, and D. Zamboni. Analysis of a denial of service attack on TCP. In Proceedings of the 1997 IEEE Symposium on Security and Privacy, pages 208--223. IEEE Computer Society Press, May 1997. http://citeseer.ist.psu.edu/article/schuba97analysis.html More
@inproceedings{ schuba97:synkill,
author = {Christoph L. Schuba and Ivan V. Krsul and Markus G. Kuhn and Eugene
H. Spafford and Aurobindo Sundaram and Diego Zamboni},
title = {Analysis of a Denial of Service Attack on {TCP}},
booktitle = "Proceedings of the 1997 {IEEE} Symposium on Security and
Privacy",
year = 1997,
month = {May},
pages = {208--223},
organization = {{IEEE} Computer Society},
publisher = {{IEEE} Computer Society Press},
URL = "citeseer.ist.psu.edu/article/schuba97analysis.html",
URL = "https://www.cerias.purdue.edu/techreports-ssl/public/97-06.ps" }
Citations (may not include all citations):
267
Internetworking with TCP/IP (context) - Comer - 1995
58
Information Science Institute (context) - Postel, Internet - 1981
42
Addison--Wesley Publishing Company (context) - Knuth, of et al. - 1981
38
Practical UNIX & Internet Security (context) - Garfinkel, Spafford - 1996
12
IP Spoofing Attacks and Hijacked Terminal Connections (context) - Response, CERT et al. - 1995
9
RFC-- 1750 Randomness Recommendations for Security (context) - Eastlake, Crocker et al. - 1994
9
Project neptune (context) - route - 1996
8
TCP SYN Flooding and IP Spoofing Attacks (context) - Response, CERT et al. - 1996
7
Network ingress filtering (context) - Ferguson - 1996
6
RFC--793 Transmission Datagram Protocol (context) - Postel - 1981
5
RFC--1597 Address Allocation for Private Internets (context) - Rekhter, Moskowitz et al. - 1994
3
TCP SYN Flooding Attack and the FireWall-1 SYNDefender (context) - Ltd - 1996
2
Defining Strategies to Protect Against TCP SYN Denial of Ser.. (context) - Inc - 1996
1
Internet Access Company (context) - Corcoran, at - 1996
1
RealSecure User's Guide and Reference Manual (context) - Systems - 1996
1
Sun Security Bulletin (context) - Graff - 1996
1
Announces Defense agains SYN Flooding Attacks (context) - Laboratories, Labs - 1996
1
Flood warning (context) - Fairlane - 1996
1
Englewood Cliffs (context) - Stevens, Wright et al. - 1995
1
Savvy Hacker Tangles Web For Net Host (context) - Ziegler - 1996
The graph only includes citing articles where the year of publication is known.
Documents on the same site (http://www.cl.cam.ac.uk/users/mgk25/): More
StegFS: A Steganographic File System for Linux - McDonald, Kuhn (1999)
(Correct)
Low Cost Attacks on Tamper Resistant Devices - Anderson, Kuhn (1997)
(Correct)
Optical Time-Domain Eavesdropping Risks of CRT Displays - Kuhn (2002)
(Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC