Mayday: Distributed Filtering for Internet Services

Mayday: Distributed Filtering for Internet Services (2003)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by David G. Andersen

Citations:

99 - 2 self

BibTeX

@MISC{Andersen03mayday:distributed,
    author = {David G. Andersen},
    title = {Mayday: Distributed Filtering for Internet Services},
    year = {2003}
}

Years of Citing Articles

Bookmark

OpenURL

Abstract

Mayday is an architecture that combines overlay networks with lightweight packet filtering to defend against denial of service attacks. The overlay nodes perform client authentication and protocol verification, and then relay the requests to a protected server. The server is protected from outside attack by simple packet filtering rules that can be efficiently deployed even in backbone routers. Mayday generalizes

Citations

3028	Chord: A Scalable Peer-to-peer Lookup Service for Internet Applications - Stoica, Morris, et al. - 2001
1023	Untraceable electronic mail, return addresses, and digital pseudonyms - Chaum - 1981
854	Resilient Overlay Networks - Andersen, Balakrishnan, et al. - 2001
488	Measuring ISP topologies with Rocketfuel - Spring, Mahajan, et al.
462	Network support for IP traceback - Savage, Wetherall, et al. - 2001
438	Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing - Ferguson, Senie - 1998
434	Overcast: Reliable multicasting with an overlay network - JANNOTTI, GIFFORD, et al. - 2000
255	Tarzan: A peer-to-peer anonymizing network layer - Freedman, Morris - 2002
234	The end-to-end effects of internet path selection - Savage, Collins, et al. - 1999
233	Implementing pushback: Router-based defense against DDoS attacks - Ioannidis, Bellovin - 2002
212	An End-to-End Approach to Host Mobility - Snoeren, Balakrishnan - 2000
197	On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets - Park, Lee
165	An algebraic approach to IP traceback - Dean, Franklin, et al. - 2002
146	Security Considerations for Peer-to-Peer Distributed Hash Tables - Sit, Morris - 2002
130	Inferring Internet Denial of Service activity - Moore, Voelker, et al. - 2001
43	Secure overlay services - KEROMYTIS, MISRA, et al. - 2002
39	Topology inference from bgp routing dynamics - Andersen, Feamster, et al. - 2002
13	Firewalking: A traceroute-like analysis of IP packet responses to determine gateway access control lists. http://www. packetfactory.net/firewalk - GOLDSMITH, SCHIFFMAN - 1998
9	Network Ingress Filtering. Internet Engineering Task Force - FERGUSON, SENIE - 2000
8	Hot spares for DoS attacks. ;Login: The - DARMOHRAY, OLIVER - 2000
5	Posting about the IP ID reverse scan. http://www.kyuzz.org/antirez/ papers/dumbscan.html - SANFILIPPO - 1998
4	Convergence of security and network performance (vantage system overview). http://www.astanetworks.com/products/ data_sheets/asta_data_sheet.pdf - NETWORKS - 2002
4	Nmap stealth port scanner. http:// www.insecure.org/nmap/index.html, 2002. History March 2003 Initial publication Feb 2008 Updated section 5 (analysis): Specified overlay network size, changed time to locate key from expectation (time/2) to maximum time n - VASKOVICH
4	Tarzan: A peerto -peer anonymizing network layer - FREEDMAN, MORRIS - 2002
3	Peakflow for enterprises datasheet. http://arbornetworks.com/up_media/up_ files/Pflow_Enter_datasheet2.1.pdf - NETWORKS - 2002
3	hping home page. http://www. hping.org - SANFILIPPO - 2000