Defending against denial of service attacks in Scout

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

Defending against denial of service attacks in Scout

Source

Operating Systems Design and Implementation archive
Proceedings of the third symposium on Operating systems design and implementation table of contents

New Orleans, Louisiana, United States

Pages: 59 - 72

Year of Publication: 1999

ISBN:1-880446-39-1

Authors

Oliver Spatscheck
Larry L. Peterson

Sponsors

SIGOPS: ACM Special Interest Group on Operating Systems
USENIX Assoc : USENIX Assoc

Publisher

USENIX Association Berkeley, CA, USA

Bibliometrics

Downloads (6 Weeks): n/a, Downloads (12 Months): n/a, Citation Count: 37

Additional Information:

references cited by index terms collaborative colleagues

Tools and Actions:	Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	R. Atkinson. RFC 1825 - Security Architecture for the Internet Protocol. IETF, August 1995.
	2	L. Badger , D. F. Sterne , D. L. Sherman , K. M. Walker , S. A. Haghighat, Practical Domain and Type Enforcement for UNIX, Proceedings of the 1995 IEEE Symposium on Security and Privacy, p.66, May 08-10, 1995
	3	M. L. Bailey, B. Gopal, M. A. Pagels, L. L. Peterson, and P. Sarkar. PATHFIND ER: A pattern-based packet classifier. In Proceedings of the First Symposium on Operating Systems Design and Implementation, pages 115-123.1994.
	4	B. N. Bershad , S. Savage , P. Pardyak , E. G. Sirer , M. E. Fiuczynski , D. Becker , C. Chambers , S. Eggers, Extensibility safety and performance in the SPIN operating system, Proceedings of the fifteenth ACM symposium on Operating systems principles, p.267-283, December 03-06, 1995, Copper Mountain, Colorado, United States
	5	Brian N. Bershad , Thomas E. Anderson , Edward D. Lazowska , Henry M. Levy, Lightweight remote procedure call, ACM Transactions on Computer Systems (TOCS), v.8 n.1, p.37-55, Feb. 1990 [doi>10.1145/77648.77650]
	6	J. Chase, H. Levy, M. Baker-Harvey, and E. Lazowska. Opal: A single address space system for 64-bit architectures. In Proceedings of the Fourth Workshop on Workstation Operating Systems, pages 80-85,1993.
	7	T. Dierks and C. Allen. Internet Draft: The TLS Protocol Version 1.0. IETF, November 1997.
	8	Peter Druschel , Larry L. Peterson, Fbufs: a high-bandwidth cross-domain transfer facility, Proceedings of the fourteenth ACM symposium on Operating systems principles, p.189-202, December 05-08, 1993, Asheville, North Carolina, United States
	9	Y. Endo, J. Gwertzman, M. Seltzer, C. Small, K. A. Smith, and D. Tang. VINO: The 1994 fall harvest. Technical Report TR-34-94, Harvard University, Cambridge, MA, 1994.
	10	B. Ford and J. Lepreau. Evolving math 3.0 to a migrating thread model. In Proceedings of the Winter 1994 USENIX Technical Conference and Exhibition, pages 97-l 14, Jan. 1994.
	11	G. Heiser, K. Elphinstone, S. Russell, and J. Vochteloo. Mungi: A distributed single addressspace operating system. Technical Report SCS&E Report 93 14, University of New South Wales, Australia, Nov. 1993.
	12	David Mosberger, Message Library Design Notes, University of Arizona, Tucson, AZ, 1997
	13	David Mosberger , Larry L. Peterson, Making paths explicit in the Scout operating system, Proceedings of the second USENIX symposium on Operating systems design and implementation, p.153-167, October 29-November 01, 1996, Seattle, Washington, United States
	14	S. J. Mullender, I. M. Leslie, and D. McAuley. Operating system support for distributed multimedia. In Proceedings of the Summer 1994 USENIX Conference: June 610, 1994, Boston, Massachusetts, USA, pages 209-2 19, Berkeley, CA, USA, Summer 1994. USENIX.
	15	George C. Necula, Proof-carrying code, Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, p.106-119, January 15-17, 1997, Paris, France [doi>10.1145/263699.263712]
	16	P. G. Neumann. Architectures and formal representations for secure systems. Technical Report SRI- CSL-96-05, Computer Science Laboratory, SRI International, Menlo Park, CA, May 1996.
	17	Dave Probert , John Bruno, Building Fundamentally Extensible Application-Specific Operating Systems in SPACE [Probert, Bruno], University of California at Santa Barbara, Santa Barbara, CA, 1995
	18	Dennis M. Ritchie , Ken Thompson, The UNIX time-sharing system, Communications of the ACM, v.17 n.7, p.365-375, July 1974 [doi>10.1145/361011.361061]
	19	Timothy Roscoe, Linkage in the Nemesis single address space operating system, ACM SIGOPS Operating Systems Review, v.28 n.4, p.48-55, Oct. 1994 [doi>10.1145/191525.191537]
	20	T. Roscoe. The Structure of a Multi-Service Operating System. PhD thesis, University of Cambridge Computer Laboratory, April 1995.
	21	J. M. Rushby, Design and verification of secure systems, Proceedings of the eighth ACM symposium on Operating systems principles, p.12-21, December 14-16, 1981, Pacific Grove, California, United States
	22	Christoph L. Schuba , Ivan V. Krsul , Markus G. Kuhn , Eugene H. spafford , Aurobindo Sundaram , Diego Zamboni, Analysis of a Denial of Service Attack on TCP, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.208, May 04-07, 1997
	23	Margo I. Seltzer , Yasuhiro Endo , Christopher Small , Keith A. Smith, Dealing with disaster: surviving misbehaved kernel extensions, Proceedings of the second USENIX symposium on Operating systems design and implementation, p.213-227, October 29-November 01, 1996, Seattle, Washington, United States
	24	Robert Wahbe , Steven Lucco , Thomas E. Anderson , Susan L. Graham, Efficient software-based fault isolation, Proceedings of the fourteenth ACM symposium on Operating systems principles, p.203-216, December 05-08, 1993, Asheville, North Carolina, United States

CITED BY 37

	Gaurav Banga , Peter Druschel , Jeffrey C. Mogul, Resource containers: a new facility for resource management in server systems, Proceedings of the third symposium on Operating systems design and implementation, p.45-58, February 1999, New Orleans, Louisiana, United States
	Kostas Magoutis , José Carlos Brustoloni , Eran Gabber , Wee Teck Ng , Avi Silberschatz, Building appliances out of components using Pebble, Proceedings of the 9th workshop on ACM SIGOPS European workshop: beyond the PC: new challenges for the operating system, September 17-20, 2000, Kolding, Denmark
	Mohit Aron , Peter Druschel , Willy Zwaenepoel, Cluster reserves: a mechanism for resource management in cluster-based network servers, ACM SIGMETRICS Performance Evaluation Review, v.28 n.1, p.90-101, June 2000
	Stefan Savage , David Wetherall , Anna Karlin , Tom Anderson, Practical network support for IP traceback, ACM SIGCOMM Computer Communication Review, v.30 n.4, p.295-306, October 2000
	Matt Welsh , David Culler , Eric Brewer, SEDA: an architecture for well-conditioned, scalable internet services, ACM SIGOPS Operating Systems Review, v.35 n.5, Dec. 2001
	Neil Daswani , Hector Garcia-Molina, Query-flood DoS attacks in gnutella, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA
	Kihong Park , Heejo Lee, On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets, ACM SIGCOMM Computer Communication Review, v.31 n.4, p.15-26, October 2001
	Xiaohu Qie , Ruoming Pang , Larry Peterson, Defensive programming: using an annotation toolkit to build DoS-resistant software, ACM SIGOPS Operating Systems Review, v.36 n.SI, Winter 2002
	Cheng Jin , Haining Wang , Kang G. Shin, Hop-count filtering: an effective defense against spoofed DDoS traffic, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA
	John Reumann , Kang G. Shin, Stateful distributed interposition, ACM Transactions on Computer Systems (TOCS), v.22 n.1, p.1-48, February 2004
	Stefan Savage , David Wetherall , Anna Karlin , Tom Anderson, Network support for IP traceback, IEEE/ACM Transactions on Networking (TON), v.9 n.3, p.226-237, June 2001
	Christos Douligeris , Aikaterini Mitrokotsa, DDoS attacks and defense mechanisms: classification and state-of-the-art, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.44 n.5, p.643-666, 5 April 2004
	Jelena Mirkovic , Peter Reiher, A taxonomy of DDoS attack and DDoS defense mechanisms, ACM SIGCOMM Computer Communication Review, v.34 n.2, April 2004
	Jelena Mirkovic , Max Robinson , Peter Reiher, Alliance formation for DDoS defense, Proceedings of the 2003 workshop on New security paradigms, August 18-21, 2003, Ascona, Switzerland
	Jangwon Lee , Gustavo de Veciana, Scalable multicast based filtering and tracing framework for defeating distributed DoS attacks, International Journal of Network Management, v.15 n.1, p.43-60, January 2005
	John J. Hartman , Peter A. Bigot , Patrick Bridges , Brady Montz , Rob Piltz , Oliver Spatscheck , Todd A. Proebsting , Larry L. Peterson , Andy Bavier, Joust: A Platform for Liquid Software, Computer, v.32 n.4, p.50-56, April 1999
	Takashi Okumura , Daniel Mosse, Virtualizing Network I/O on End-Host Operating System: Operating System Support for Network Control and Resource Protection, IEEE Transactions on Computers, v.53 n.10, p.1303-1316, October 2004
	Xiaohu Qie , Ruoming Pang , Larry Peterson, Defensive programming: using an annotation toolkit to build DoS-resistant software, Proceedings of the 5th symposium on Operating systems design and implementation Due to copyright restrictions we are not able to make the PDFs for this conference available for downloading , December 09-11, 2002, Boston, Massachusetts
	Jelena Mirkovic , Peter Reiher, D-WARD: A Source-End Defense against Flooding Denial-of-Service Attacks, IEEE Transactions on Dependable and Secure Computing, v.2 n.3, p.216-232, July 2005
	Chatree Sangpachatanaruk , Sherif M. Khattab , Taieb Znati , Rami Melhem , Daniel Mossé, Design and analysis of a replicated elusive server scheme for mitigating denial of service attacks, Journal of Systems and Software, v.73 n.1, p.15-29, September 2004
	Haining Wang , Danlu Zhang , Kang G. Shin, Change-Point Monitoring for the Detection of DoS Attacks, IEEE Transactions on Dependable and Secure Computing, v.1 n.4, p.193-208, October 2004
	Susan J. Chinburg , Ramesh Sharda , Mark Weiser, Establishing the business value of network security using analytical hierarchy process, Creating business value with information technology: challenges and solutions, Idea Group Publishing, Hershey, PA, 2003
	Haining Wang , Abhijit Bose , Mohamed El-Gendy , Kang G. Shin, IP Easy-pass: a light-weight network-edge resource access control, IEEE/ACM Transactions on Networking (TON), v.13 n.6, p.1247-1260, December 2005
	Jun Xu , Wooyong Lee, Sustaining Availability of Web Services under Distributed Denial of Service Attacks, IEEE Transactions on Computers, v.52 n.2, p.195-208, February 2003
	Valerio Schiavoni , Vivien Quéma, A posteriori defensive programming: an annotation toolkit for DoS-resistant component-based architectures, Proceedings of the 2006 ACM symposium on Applied computing, April 23-27, 2006, Dijon, France
	Heng Yin , Haining Wang, Building an application-aware IPsec policy system, IEEE/ACM Transactions on Networking (TON), v.15 n.6, p.1502-1513, December 2007
	John Reumann , Ashish Mehra , Kang G. Shin , Dilip Kandlur, Virtual services: a new abstraction for server consolidation, Proceedings of the Annual Technical Conference on 2000 USENIX Annual Technical Conference, p.10-10, June 18-23, 2000, San Diego, California
	Austin Donnelly, Lightweight thread tunnelling in network applications, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.50 n.14, p.2462-2474, 5 October 2006
	Christophe Rippert , Jean-Bernard Stefani, THINK: a secure distributed systems architecture, Proceedings of the 10th workshop on ACM SIGOPS European workshop: beyond the PC, July 01-01, 2002, Saint-Emilion, France
	Jenshiuh Liu , Zhi-Jian Lee , Yeh-Ching Chung, Dynamic probabilistic packet marking for efficient IP traceback, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.51 n.3, p.866-882, February, 2007
	Haining Wang , Cheng Jin , Kang G. Shin, Defense against spoofed IP traffic using hop-count filtering, IEEE/ACM Transactions on Networking (TON), v.15 n.1, p.40-53, February 2007
	David Moore , Geoffrey M. Voelker , Stefan Savage, Inferring internet denial-of-service activity, Proceedings of the 10th conference on USENIX Security Symposium, p.2-2, August 13-17, 2001, Washington, D.C.
	Heng Yin , Haining Wang, Building an application-aware IPsec policy system, Proceedings of the 14th conference on USENIX Security Symposium, p.21-21, July 31-August 05, 2005, Baltimore, MD
	Thiemo Voigt , Renu Tewari , Douglas Freimuth , Ashish Mehra, Kernel Mechanisms for Service Differentiation in Overloaded Web Servers, Proceedings of the General Track: 2002 USENIX Annual Technical Conference, p.189-202, June 25-30, 2001
	Charles D. Cranor , Gurudatta M. Parulkar, The UVM virtual memory system, Proceedings of the Annual Technical Conference on 1999 USENIX Annual Technical Conference, p.9-9, June 06-11, 1999, Monterey, California
	David Moore , Geoffrey M. Voelker , Stefan Savage, Inferring internet denial-of-service activity, Proceedings of the 10th conference on USENIX Security Symposium, p.2-2, August 13-17, 2001, Washington, D.C.
	Tao Peng , Christopher Leckie , Kotagiri Ramamohanarao, Survey of network-based defense mechanisms countering the DoS and DDoS problems, ACM Computing Surveys (CSUR), v.39 n.1, p.3-es, 2007