Using rhythmic nonces for puzzle-based DoS resistance

Authors:
Ellick M. Chan;Carl A. Gunter;Sonia Jahid;Evgeni Peryshkin;Daniel Rebolledo
Affiliations:
University of Illinois at Urbana-Champaign, Urbana, USA;University of Illinois at Urbana-Champaign, Urbana, USA;University of Illinois at Urbana-Champaign, Urbana, USA;University of Illinois at Urbana-Champaign, Urbana, USA;University of Illinois at Urbana-Champaign, Urbana, USA
Venue:
Proceedings of the 2nd ACM workshop on Computer security architectures
Year:
2008

Citing 6
Cited 0

Defending Against Denial-of-Service Attacks with Puzzle Auctions

SP '03 Proceedings of the 2003 IEEE Symposium on Security and Privacy
New client puzzle outsourcing techniques for DoS resistance

Proceedings of the 11th ACM conference on Computer and communications security
Moderately hard, memory-bound functions

ACM Transactions on Internet Technology (TOIT)
Using client puzzles to protect TLS

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10
Harvesting verifiable challenges from oblivious online sources

Proceedings of the 14th ACM conference on Computer and communications security
Efficient memory bound puzzles using pattern databases

ACNS'06 Proceedings of the 4th international conference on Applied Cryptography and Network Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

To protect against replay attacks, many Internet protocols rely on nonces to guarantee freshness. In practice, the server generates these nonces during the initial handshake, but if the server is under attack, resources consumed by managing certain protocols can lead to DoS vulnerabilities. To help alleviate this problem, we propose the concept of rhythmic nonces, a cryptographic tool that allows servers to measure request freshness with minimal bookkeeping costs. We explore the impact of this service in the context of a puzzle-based DoS resistance scheme we call "SYN puzzles". Our preliminary results based on mathematical analysis and evaluation of a prototype suggests that our scheme is more resistant than existing techniques.