NANOG Meeting Presentation Abstract

Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
Meeting:	NANOG22
Date / Time:	2001-05-21 9:45am - 10:15am
Room:	Forum Hall
Presenters:	Speakers: Rob Malan, University of Michigan. Farnam Jahanian, University of Michigan. Jon Arnold, University of Michigan. Matthew Smart, University of Michigan. Paul Howell, Merit Network. Russell Dwarshuis, Merit Network. Jeff Ogden, Merit Network. Jon Poland, Merit Network.
Abstract:	This presentation summarizes over a year of operational experience in tracking denial-of-service attacks across a large regional ISP. We present measurements and observations on attacks ranging from small floods targeting dorm-room IRC servers, to all out, well-coordinated attacks against elements of the backbone infrastructure. In collaboration with backbone operations/engineering staff, we deployed analysis and probe machines at the peering points and major customer access points in a Michigan provider\'s network. The measurement infrastructure combined Netflow collection with network topology statistics to identify attack ingress points and trajectories. The presentation will highlight some of the operational challenges we faced as well the successes.
Files:	Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
Sponsors:	None.

Back to NANOG22 agenda.

NANOG22 Abstracts

• Show All

• BGP Techniques for Service Providers
  Speakers:
  Phil Smith, Cisco Systems;

• Basic ISP Traffic Engineering Tools and Practices
  Speakers:
  John Brown, Chagres Technologies;

• ARIN Policies and Guidelines
  Speakers:
  Richard Jimmerson, ARIN;

• Estimating Global Denial-of-Service Activity
  Speakers:
  Stefan SavageUCSD/Asta Networks; .
  David MooreCAIDA/CAIMIS; .
  Geoff VoelkerUCSD CSE; .
  

• Estimating Global Denial-of-Service Activity
  Speakers:
  Stefan SavageUCSD/Asta Networks; .
  David MooreCAIDA/CAIMIS; .
  Geoff VoelkerUCSD CSE; .
  

• Estimating Global Denial-of-Service Activity
  Speakers:
  Stefan SavageUCSD/Asta Networks; .
  David MooreCAIDA/CAIMIS; .
  Geoff VoelkerUCSD CSE; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Observations and Experiences Tracking Denial-Of-Service Attacks Across a Large Regional ISP
  Speakers:
  Rob MalanUniversity of Michigan; .
  Farnam JahanianUniversity of Michigan; .
  Jon ArnoldUniversity of Michigan; .
  Matthew SmartUniversity of Michigan; .
  Paul HowellMerit Network; .
  Russell DwarshuisMerit Network; .
  Jeff OgdenMerit Network; .
  Jon PolandMerit Network; .
  

• Practical Approaches to Dealing with DDoS Attacks
  Speakers:
  Massimiliano Poletto, Mazu Networks;

• A Fine-Grained View of High-Performance Networking
  Speakers:
  Steve Casner, Packet Design; Cengiz AlaettinogluPacket Design; .
  Chia-Chee KuanPacket Design; .
  

• A Fine-Grained View of High-Performance Networking
  Speakers:
  Steve Casner, Packet Design; Cengiz AlaettinogluPacket Design; .
  Chia-Chee KuanPacket Design; .
  

• A Fine-Grained View of High-Performance Networking
  Speakers:
  Steve Casner, Packet Design; Cengiz AlaettinogluPacket Design; .
  Chia-Chee KuanPacket Design; .
  

• Some Initial Measurements of Prefix Length Phyltreing
  Speakers:
  Jennifer RexfordAT&T; .
  Steve BellovinAT&T; .
  Randy BushNone; .
  

• Some Initial Measurements of Prefix Length Phyltreing
  Speakers:
  Jennifer RexfordAT&T; .
  Steve BellovinAT&T; .
  Randy BushNone; .
  

• Some Initial Measurements of Prefix Length Phyltreing
  Speakers:
  Jennifer RexfordAT&T; .
  Steve BellovinAT&T; .
  Randy BushNone; .
  

• IPv4 Address Space Allocation and Usage Trends
  Speakers:
  Scott Marcus, Genuity;

• Progress With the DNS Security Extensions
  Speakers:
  Edward Lewis, TISlabs;

• Introduction to IP Multicast Practice
  Speakers:
  Bill Nickless, Argonne National Lab;

• SNMP Update
  Speakers:
  Jeff Case, SNMP Research International;

• More on Network Policy - Sequel to a BOF, Prelude to a Tutorial
  Speakers:
  Stephen StuartMFN; .
  

• The New IETF Sub-IP Area: A Brief Summary for Service Providers
  Speakers:
  Curtis VillamizarAvici; .
  

• MPLS Enhancements to Support Layer 2 Transport Services
  Speakers:
  Jeremy Brayley, Laurel Networks;

• Very Pleasant/Painful Networking: The Highs and Lows of Building and Maintaining VPNs
  Speakers:
  Matt Baker, Intel;

• OSPF for a Broadband Wireless Campus Backbone
  Speakers:
  Joseph Hui, Arizona State University;

• Operational Experience with IPv6 Migration
  Speakers:
  Bill ManningISI; .
  Akira KatoISI; .
  

• Operational Experience with IPv6 Migration
  Speakers:
  Bill ManningISI; .
  Akira KatoISI; .
  

• An Information Sharing and Analysis Center for the Internet
  Speakers:
  Kelly Cooper, Genuity;