A Dynamic Programming Algorithm for the Generalized Minimum Filter Placement Problem on Tree Structures

References

• Armbruster B., Smith J. C., Park K. A packet filter placement problem with application to defense against spoofed denial of service attacks. Eur. J. Oper. Res. (2007) 176(2):1283–1292Crossref, Google Scholar
• CERT Denial-of-service developments. (2000) . Advisory CA-2000-01, Computer Emergency Response Team (CERT), Carnegie Mellon University, Pittsburgh, http://www.cert.org/advisories/CA-2000-01.htmlGoogle Scholar
• Chen L.-C., Longstaff T. A., Carley K. M. Characterization of defense mechanisms against distributed denial of service attacks. Comput. Security (2004) 23(8):665–678Crossref, Google Scholar
• CSI/FBI Computer crime and security survey. (2002) (Computer Security Institute and Federal Bureau of Investigation (CSI/FBI)). http://www.gocsi.comGoogle Scholar
• CSI/FBI Computer crime and security survey. (2003) (Computer Security Institute and Federal Bureau of Investigation (CSI/FBI)). http://www.gocsi.comGoogle Scholar
• CSI/FBI Computer crime and security survey. (2004) (Computer Security Institute and Federal Bureau of Investigation (CSI/FBI)). http://www.gocsi.comGoogle Scholar
• Douligeris C., Mitrokotsa A. DDoS attacks and defense mechanisms: Classification and state-of-the-art. Comput. Networks (2004) 44(5):643–666Crossref, Google Scholar
• Ferguson P., Senie D. Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing. (2000) . RFC 2827, The RFC Archive, http://www.rfc-archive.org/getrfc.php?rfc=2827Google Scholar
• Garber L. Denial-of-service attacks rip the Internet. IEEE Comput. (2000) 33(4):12–17Crossref, Google Scholar
• Mofya E. C., Smith J. C. Exact and heuristic algorithms for solving the generalized minimum filter placement problem. J. Combin. Optim. (2006) 12(3):231–256Crossref, Google Scholar
• Park K., Lee H. A proactive approach to distributed DoS attack prevention using route-based filtering. (2000) . Technical Report CSD-TR 00–017, Purdue University, West Lafayette, INGoogle Scholar
• Park K., Lee H. On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack. Proc. 20th Annual Joint Conf. IEEE Comput. Comm. Soc. (2001a) 1Anchorage, AK(IEEE Press, New York) 338–347Google Scholar
• Park K., Lee H. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law Internets. Proc. ACM SIGCOMM 2001 (2001b) San Diego(Association for Computing Machinery, New York) 15–26Crossref, Google Scholar
• Park K., Kim H., Bethala B., Selcuk A. Scalable protection against DDOS and worm attacks. (2004) . DARPA/ATO Fault Tolerant Networks Report AFRL-IF-RS-TR-2004–100, Purdue University, West Lafayette, INGoogle Scholar
• Savage S., Wetherall D., Karlin A., Anderson T. Practical network support for IP traceback. Proc. ACM SIGCOMM 2000 (2000) Stockholm(Association for Computing Machinery, New York) 295–306Crossref, Google Scholar