PMS an expeditious marking scheme to combat with the DDoS attack

Usman Tariq; Man Pyo Hong; Kyung Suk Lhee

doi:10.1109/INMIC.2005.334468

PMS an expeditious marking scheme to combat with the DDoS attack

Usman Tariq
, Man Pyo Hong
, Kyung Suk Lhee

Ajou University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

4 Scopus citations

Abstract

Distributed denial of service (DDoS) is real time challenging problem for internet users. Due to unknown nature of attack, any defense mechanism should perform these two tasks: immediately detect the attack and take measurements to stop the upcoming flood. Currently deployed defense mechanisms can easily be defeated by the attackers because they know the weaknesses in the systems. Yaar [1] proposed Pi marking scheme using the 16 bit IP header identification field. The performance of Pi marking is not effective because of static 1 bit or 2 bit marking criteria. Our technique decides the packet marking dynamically on the bases of number of hop counts. The performance is promising as compared to other existing schemes.

Original language	English
Title of host publication	2005 Pakistan Section Multitopic Conference, INMIC
DOIs	https://doi.org/10.1109/INMIC.2005.334468
State	Published - 2005
Externally published	Yes
Event	2005 Pakistan Section Multitopic Conference, INMIC - Karachi, Pakistan Duration: 24 Dec 2005 → 25 Dec 2005

Publication series

Name	2005 Pakistan Section Multitopic Conference, INMIC

Conference

Conference	2005 Pakistan Section Multitopic Conference, INMIC
Country/Territory	Pakistan
City	Karachi
Period	24/12/05 → 25/12/05

Keywords

Denial of service attacks
Measurement
Packet marking
Security

Access to Document

10.1109/INMIC.2005.334468

Cite this

@inproceedings{845dc27b6fdc465a8ae799984e394de9,

title = "PMS an expeditious marking scheme to combat with the DDoS attack",

abstract = "Distributed denial of service (DDoS) is real time challenging problem for internet users. Due to unknown nature of attack, any defense mechanism should perform these two tasks: immediately detect the attack and take measurements to stop the upcoming flood. Currently deployed defense mechanisms can easily be defeated by the attackers because they know the weaknesses in the systems. Yaar [1] proposed Pi marking scheme using the 16 bit IP header identification field. The performance of Pi marking is not effective because of static 1 bit or 2 bit marking criteria. Our technique decides the packet marking dynamically on the bases of number of hop counts. The performance is promising as compared to other existing schemes.",

keywords = "Denial of service attacks, Measurement, Packet marking, Security",

author = "Usman Tariq and Hong, \{Man Pyo\} and Lhee, \{Kyung Suk\}",

year = "2005",

doi = "10.1109/INMIC.2005.334468",

language = "English",

isbn = "0780394291",

series = "2005 Pakistan Section Multitopic Conference, INMIC",

booktitle = "2005 Pakistan Section Multitopic Conference, INMIC",

note = "2005 Pakistan Section Multitopic Conference, INMIC ; Conference date: 24-12-2005 Through 25-12-2005",

}

TY - GEN

T1 - PMS an expeditious marking scheme to combat with the DDoS attack

AU - Tariq, Usman

AU - Hong, Man Pyo

AU - Lhee, Kyung Suk

PY - 2005

Y1 - 2005

N2 - Distributed denial of service (DDoS) is real time challenging problem for internet users. Due to unknown nature of attack, any defense mechanism should perform these two tasks: immediately detect the attack and take measurements to stop the upcoming flood. Currently deployed defense mechanisms can easily be defeated by the attackers because they know the weaknesses in the systems. Yaar [1] proposed Pi marking scheme using the 16 bit IP header identification field. The performance of Pi marking is not effective because of static 1 bit or 2 bit marking criteria. Our technique decides the packet marking dynamically on the bases of number of hop counts. The performance is promising as compared to other existing schemes.

AB - Distributed denial of service (DDoS) is real time challenging problem for internet users. Due to unknown nature of attack, any defense mechanism should perform these two tasks: immediately detect the attack and take measurements to stop the upcoming flood. Currently deployed defense mechanisms can easily be defeated by the attackers because they know the weaknesses in the systems. Yaar [1] proposed Pi marking scheme using the 16 bit IP header identification field. The performance of Pi marking is not effective because of static 1 bit or 2 bit marking criteria. Our technique decides the packet marking dynamically on the bases of number of hop counts. The performance is promising as compared to other existing schemes.

KW - Denial of service attacks

KW - Measurement

KW - Packet marking

KW - Security

UR - https://www.scopus.com/pages/publications/50249088936

U2 - 10.1109/INMIC.2005.334468

DO - 10.1109/INMIC.2005.334468

M3 - Conference contribution

AN - SCOPUS:50249088936

SN - 0780394291

SN - 9780780394292

T3 - 2005 Pakistan Section Multitopic Conference, INMIC

BT - 2005 Pakistan Section Multitopic Conference, INMIC

T2 - 2005 Pakistan Section Multitopic Conference, INMIC

Y2 - 24 December 2005 through 25 December 2005

ER -

PMS an expeditious marking scheme to combat with the DDoS attack

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this