Internet Denial of Service: Attack and Defense Mechanisms
Jelena Mirkovic
Sven Dietrich
David Dittrich
Peter Reiher

ISBN-10: 0131475738
ISBN-13: 9780131475731

Publisher: Prentice Hall
Copyright: 2005
Format: Paper; 400 pp
Published: 12/30/2004

Suggested retail price: $44.99
Buy from myPearsonStore



Internet Denial of Service provides an in-depth look at the history and future of DDoS attacks. The authors draw on their extensive experience with actual DDoS attacks to offer practical methods for defending against and responding to such crimes. They also survey the commercial DDoS defense tools currently available and share the pros and cons of various defense strategies.

The first straightforward account of DDoS--a serious issue that impacts revenue in the board room and production in the server room.

  • Despite there being thousands of distributed denial-of-service (DDoS) attacks daily and increasing at a rate of 120% per year, this is the first book devoted to the subject.
  • The authors are highly-regarded authorities in this field who have been involved in a large number of real-life cases.
  • Contains a thorough survey of the commercial DDoS defense tools currently available.

Foreword.

Acknowledgments.

About the Authors.

1. Introduction.

    DoS and DdoS

    Why Should We Care?

    What Is This Book?

    Who Is This Book For?

    What Can This Book Help You Do?

    Outline of the Remaining Chapters

2. Understanding Denial of Service.

    The Ulterior Motive

    Meet the Attackers

    Behind the Scenes

    Distribution Effects

    DDoS: Hype or Reality?

    How Vulnerable Are You to DDoS?

3. History of DoS and DDoS.

    Motivation

    Design Principles of the Internet

    DoS and DDoS Evolution

4. How Attacks Are Waged.

    Recruitment of the Agent Network

    Controlling the DDoS Agent Network

    Semantic Levels of DDoS Attacks

    Attack Toolkits

    What Is IP Spoofing?

    DDoS Attack Trends

5. An Overview of DDoS Defenses.

    Why DDoS Is a Hard Problem

    DDoS Defense Challenges

    Prevention versus Protection and Reaction

    DDoS Defense Goals

    DDoS Defense Locations

    Defense Approaches

6. Detailed Defense Approaches.

    Thinking about Defenses

    General Strategy for DDoS Defense

    Preparing to Handle a DDoS Attack

    Handling an Ongoing DDoS Attack as a Target

    Handling an Ongoing DDoS Attack as a Source

    Agreements/Understandings with Your ISP

    Analyzing DDoS tools

7. Survey of Research Defense Approaches.

    Pushback

    Traceback

    D-WARD

    NetBouncer

    Secure Overlay Services (SOS)

    Proof of Work

    DefCOM

    COSSACK

    Pi

    SIFF: An End-Host Capability Mechanism to Mitigate DDoS Flooding Attacks

    Hop-Count Filtering (HCF)

    Locality and Entropy Principles

    An Empirical Analysis of Target-Resident DoS Filters

    Research Prognosis

8. Legal Issues.

    Basics of the U.S. Legal System

    Laws That May Apply to DDoS Attacks

    Who Are the Victims of DDoS?

    How Often Is Legal Assistance Sought in DDoS Cases?

    Initiating Legal Proceedings as a Victim of DdoS

    Evidence Collection and Incident Response Procedures

    Estimating Damages

    Jurisdictional Issues

    Domestic Legal Issues

    International Legal Issues

    Self-Help Options

    A Few Words on Ethics

    Current Trends in International Cyber Law

9. Conclusions.

    Prognosis for DdoS

    Social, Moral, and Legal Issues

    Resources for Learning More

    Conclusion

Appendix A. Glossary.

Appendix B. Survey of Commercial Defense Approaches.

    Mazu Enforcer by Mazu Networks

    Peakflow by Arbor Networks

    WS Series Appliances by Webscreen Technologies

    Captus IPS by Captus Networks

    MANAnet Shield by CS3

    Cisco Traffic Anomaly Detector XT and Cisco Guard XT

    StealthWatch by Lancope

    Summary

Appendix C. DDoS Data.

    2004 CSI/FBI Computer Crime and Security Survey

    Inferring Internet Denial-of-Service Activity

    A Framework for Classifying Denial-of- Service Attacks

    Observations and Experiences Tracking Denial-of-Service Attacks across a Regional ISP

    Report on the DDoS Attack on the DNS Root Servers

    Conclusion

References.

Index.

 

Jelena Mirkovic has been an assistant professor at the University of Delaware since 2003. She holds a Ph.D. in computer science from the University of California, Los Angeles, where she developed effective defenses against distributed denial-of-service attacks.

Sven Dietrich is a member of the technical staff at the CERT Coordination Center, part of the Software Engineering Institute at Carnegie Mellon University, and is affiliated with Carnegie Mellon CyLab, a university-wide cyber security research and education initiative. He has worked and published on DDoS since 1999.

David Dittrich is a senior security engineer at the University of Washingtons Center for Information Assurance and Cybersecurity and a founding member of the Honeynet Project. He published the first detailed technical analyses of DDoS tools in 1999, and maintains the largest Web page on the subject.

Peter Reiher is an adjunct associate professor at the University of California, Los Angeles. His research includes defenses against denial-of-service attacks.



Suddenly your Web server becomes unavailable. When you investigate, you realize that a flood of packets is surging into your network. You have just become one of the hundreds of thousands of victims of a denial-of-service attack, a pervasive and growing threat to the Internet. What do you do?

Internet Denial of Service sheds light on a complex and fascinating form of computer attack that impacts the confidentiality, integrity, and availability of millions of computers worldwide. It tells the network administrator, corporate CTO, incident responder, and student how DDoS attacks are prepared and executed, how to think about DDoS, and how to arrange computer and network defenses. It also provides a suite of actions that can be taken before, during, and after an attack.

Inside, you'll find comprehensive information on the following topics

  • How denial-of-service attacks are waged
  • How to improve your network's resilience to denial-of-service attacks
  • What to do when you are involved in a denial-of-service attack
  • The laws that apply to these attacks and their implications
  • How often denial-of-service attacks occur, how strong they are, and the kinds of damage they can cause
  • Real examples of denial-of-service attacks as experienced by the attacker, victim, and unwitting accomplices

The authors' extensive experience in handling denial-of-service attacks and researching defense approaches is laid out clearly in practical, detailed terms.



View a Sample Chapter PDF:

Pearson Higher Education offers special pricing when you choose to package your text with other student resources. If you're interested in creating a cost-saving package for your students, contact your Pearson Higher Education representative for pricing and ordering information.

This title is a member of the Radia Perlman Series in Computer Networking and Security, which also contains the titles below . You can also visit the Radia Perlman Series in Computer Networking and Security page.

  • 0131481045Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses, 2/E
    Skoudis & Liston
    © 2006 | Prentice Hall | Paper; 784 pages | Instock
    ISBN-10: 0131481045 | ISBN-13: 9780131481046
    Brief Description | Buy from myPearsonStore

  • 0131014064Field Guide to Wireless LANs for Administrators and Power Users, A
    Maufer
    © 2004 | Prentice Hall | Paper; 368 pages | Out of Stock
    ISBN-10: 0131014064 | ISBN-13: 9780131014060
    Brief Description

  • 0131475738Internet Denial of Service: Attack and Defense Mechanisms
    Mirkovic, Dietrich, Dittrich & Reiher
    © 2005 | Prentice Hall | Paper; 400 pages | Instock
    ISBN-10: 0131475738 | ISBN-13: 9780131475731
    Brief Description | Buy from myPearsonStore

  • 0131014056Malware: Fighting Malicious Code
    Skoudis & Zeltser
    © 2004 | Prentice Hall | Paper; 672 pages | Instock
    ISBN-10: 0131014056 | ISBN-13: 9780131014053
    Brief Description | Buy from myPearsonStore

  • 0138562466Mobile IP: The Internet Unplugged
    Solomon
    © 1998 | Prentice Hall | Paper; 384 pages | Instock
    ISBN-10: 0138562466 | ISBN-13: 9780138562465
    Brief Description | Buy from myPearsonStore

  • 0130460192Network Security: Private Communication in a Public World, 2/E
    Kaufman, Perlman & Speciner
    © 2003 | Prentice Hall | Cloth; 752 pages | Instock
    ISBN-10: 0130460192 | ISBN-13: 9780130460196
    Brief Description | Buy from myPearsonStore

  • 0137155883Network Security:Private Communications in a Public World, Safari, 2/E
    Kaufman, Perlman & Speciner
    © 2003 | Prentice Hall | On-line Supplement; 752 pages | Instock
    ISBN-10: 0137155883 | ISBN-13: 9780137155880
    URL: http://www.safari.informit.com


  • 013028226XNext Generation Optical Networks: The Convergence of IP Intelligence and Optical Technologies
    Tomsu & Schmutzer
    © 2002 | Prentice Hall | Paper; 352 pages | Instock
    ISBN-10: 013028226X | ISBN-13: 9780130282262
    Brief Description | Buy from myPearsonStore

  • 0131014684Optimizing Network Performance with Content Switching: Server, Firewall and Cache Load Balancing
    Syme & Goldie
    © 2004 | Prentice Hall | Paper; 288 pages | Instock
    ISBN-10: 0131014684 | ISBN-13: 9780131014688
    Brief Description | Buy from myPearsonStore

  • 013233352XPowerPoint Slides
    Skoudis
    © 2007 | Prentice Hall | Slides | Estimated Availability: 09/25/2006
    ISBN-10: 013233352X | ISBN-13: 9780132333528


  • 0130462233Practice of Network Security, The: Deployment Strategies for Production Environments
    Liska
    © 1996 | Prentice Hall | Paper; 416 pages | Instock
    ISBN-10: 0130462233 | ISBN-13: 9780130462237
    Brief Description | Buy from myPearsonStore

  • 0130652083WebDAV: Next-Generation Collaborative Web Authoring
    Dusseault
    © 2004 | Prentice Hall | Paper; 480 pages | Instock
    ISBN-10: 0130652083 | ISBN-13: 9780130652089
    Brief Description | Buy from myPearsonStore

Pearson Higher Education offers special pricing when you choose to package your text with other student resources. If you're interested in creating a cost-saving package for your students contact your Pearson Higher Education representative.


Copyright ©2008 Pearson Education. All rights reserved. Legal Notice | Privacy Policy | Permissions