See this document in CiteSeerX!

Hash-Based IP Traceback (2001)  (Make Corrections)  (70 citations)
Alex C. Snoeren, Craig Partridge, Luis A. Sanchez, Christine E. Jones, Fabrice Tchakountio, Stephen T. Kent, W. Timothy Strayer



  Home/Search   Context   Related

Links:   ACM   DBLP

 
View or download:
ucsd.edu/~snoeren/pa...spiesigcomm.pdf
bbn.com/documents/a...spiesigcomm01.ps
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  ucsd.edu/groups/sysnet/pubs (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: The design of the IP protocol makes it difficult to reliably identify the originator of an IP packet. Even in the absence of any deliberate attempt to disguise a packet's origin, wide-spread packet forwarding techniques such as NAT and encapsulation may obscure the packet's true source. Techniques have been developed to determine the source of large packet flows, but, to date, no system has been presented to track individual packets in an efficient, scalable fashion. (Update)

Cited by:   More
BBN Technical Report No. 8333 - Explicit Transport Error   (Correct)
LADS: Large-scale Automated DDoS detection System - Sekar, Duffield..   (Correct)
Toward a Framework for Internet Forensic Analysis - Vyas Sekar Yinglian   (Correct)

Similar documents (at the sentence level):
71.3%:   Single-Packet IP Traceback - Snoeren, Partridge, Sanchez, Jones.. (2002)   (Correct)

Active bibliography (related documents):   More   All
0.2:   Detecting SYN Flooding Attacks - Wang, Zhang, Shin (2002)   (Correct)
0.2:   SYN-dog: Sniffing SYN Flooding Sources - Wang, Zhang, Shin (2002)   (Correct)
0.2:   A Recursive Session Token Protocol for Use in Computer.. - Carrier, Shields (2002)   (Correct)

Similar documents based on text:   More   All
1.1:   Hardware Support for a Hash-Based IP Traceback - Walter (2001)   (Correct)
0.5:   FIRE: Flexible Intra-AS Routing Environment - Partridge, Snoeren, Strayer.. (2001)   (Correct)
0.5:   Privacy Issues in Virtual Private Networks - Timothy Strayer Bbn   (Correct)

Related documents from co-citation:   More   All
59:   Practical network support for ip traceback - Savage, Wetherall et al. - 2000
28:   Advanced and authenticated marking schemes for IP traceback - Song, Perrig - 2000
26:   Network Ingress Filtering: Defeating Denial of Service Attacks which Employ IP S.. (context) - Ferguson, Senie - 1998

BibTeX entry:   (Update)

A. Snoeren, C. Partridge, L. Sanchez, W. Strayer, C. Jones and F. Tchakountio, "Hash-Based IP Traceback," Proc. ACM/SIGCOMM, to appear, August 2001. http://citeseer.ist.psu.edu/snoeren01hashbased.html   More

@misc{ snoeren-hash,
	author = "Alex C. Snoeren and Craig Partridge and Luis A. Sancheq and Christine E. Jones and Fabrice Tchakountio and Stephen T. Kent and W. Timothy Strayer",
	title = "Hash-Based IP Traceback",
	url = "citeseer.ist.psu.edu/snoeren01hashbased.html",
	url = "citeseer.nj.nec.com/569699.html" }
Citations (may not include all citations):
428   Internet Protocol (context) - POSTEL - 1981
401   The MD5 message-digest algorithm (context) - RIVEST - 1992
358   Universal classes of hash functions (context) - CARTER, WEGMAN - 1979  DBLP
293   Summary cache: a scalable wide-area web cache sharing protoc.. - FAN, CAO et al. - 2000
234   Internet Control Message Protocol (context) - POSTEL - 1981
181   Spacetime trade off hash coding with allowable error - time, in et al. - 1970
154   Network ingress filtering: Defeating denial of service attac.. (context) - FERGUSON, AND - 1998
148   Practical network support for IP traceback - SAVAGE, WETHERALL et al. - 2000  ACM   DBLP
64   ICMP traceback messages (context) - BELLOVIN - 2000
63   Advanced and authenticated marking schemes for IP traceback - SONG, PERRIG - 2001  DBLP
57   Tracing anonymous packets to their approximate source (context) - BURCH, ANDCHESWICK - 2000
56   UMAC: fast and secure message authentication - BLACK, HALEVI et al. - 1999
56   Trends in wide area IP traffic patterns: A view from Ames In.. - MCCREARY, CLAFFY - 2000
53   Trajectory sampling for direct traffic observation - DUFFIELD, AND - 2000  ACM   DBLP
50   Requirements for IP version 4 routers (context) - BAKER - 1995
48   CenterTrack: An IP overlay network for tracking DoS floods (context) - STONE - 2000
45   LFSR-Based hashing and authentication (context) - KRAWCZYK - 1994  ACM   DBLP
43   NATIONAL LABORATORY FOR APPLIED NETWORK RESEARCH (context) - FOR, RESEARCH et al.
20   MMH Software message authentication Gbitsecond rate - KRAWCZYK, message et al. - 1997
13   Infrastructure for intrusion detection and response (context) - SCHNACKENBERG, DJAHANDARI et al. - 2000
13   Security fun with OCxmon and cflowd (context) - SAGER - 1998
8   Hardware support for a hash-based IP traceback - SANCHEZ, MILLIKEN et al. - 2001
5   Intentiondriven ICMP trace-back (context) - WU, ZHANG et al. - 2001
2   End-to-end internet path dynamics (context) - PAXSON - 1999
http://support.microsoft.com/



The graph only includes citing articles where the year of publication is known.


Documents on the same site (http://www.cs.ucsd.edu/groups/sysnet/pubs.html):   More
Moshe: A Group Membership Service for WANs - Keidar, Sussman, Marzullo, Dolev (1999)   (Correct)
Scalable Causal Message Logging for Wide-Area Environments - Bhatia, Marzullo, Alvisi (2001)   (Correct)
The Phoenix Recovery System: Rebuilding from the.. - Junqueira.. (2003)   (Correct)

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC