Publications:
- Mina Guirguis, Azer Bestavros and Ibrahim Matta. "Exploiting the Transients of Adaptation for
RoQ Attacks on Internet Resources". In Proceedings
of the 12th IEEE International Conference on Network Protocols
(ICNP'04), Berlin, Germany, October 2004.
This is the first paper that
introduced RoQ attacks as a new breed of dynamic exploits against
adaptation mechanisms. In addition to illustrating a general
adaptation framework for studying dynamic exploits, this paper
instantiates RoQ attacks on network transport protocols (e.g., TCP)
and active queue managmenent schemes. A longer version of this paper
can be found here.
- Mina Guirguis, Azer Bestavros and Ibrahim Matta. "Adaptation=Vulnerability: Under RoQ
Attacks". Poster in ACM SIGCOMM 2004, Portland,
Oregon, September 2004.
- Mina Guirguis, Azer Bestavros and Ibrahim Matta. "Bandwidth Stealing via Link Targeted RoQ
Attacks". In Proceedings of the 2nd IASTED
International Conference on Communication and Computer Networks
(CCN'04), Cambridge, Massachusetts, November 2004.
This paper shows how RoQ attacks are
used in a distributed fashion to steal bandwidth from a subset of
flows, to benefit another subset of flows.
- Mina Guirguis, Azer Bestavros, Ibrahim Matta and Yuting Zhang.
"Reduction of Quality (RoQ) Attacks on
Internet End-Systems". In Proceedings of the 24th
IEEE INFOCOM (INFOCOM'05), Miami, Florida, March, 2005.
This paper demonstrates how
RoQ attacks target admission controllers employed in modern web
servers.
- Mina Guirguis, Azer Bestavros and Ibrahim Matta. "On the Impact of Low-Rate Attacks"
. In Proceedings of the 41st IEEE International Conference on
Communications (ICC'06), Istanbul, Turkey, June 2006. (To appear)
This paper presents
upper bounds on the impact of low-rate attacks. It identifies variants
of low-rate attacks and outlines defense mechanisms. A longer version
of this paper can be found here.
|
|