{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,31]],"date-time":"2025-12-31T12:18:54Z","timestamp":1767183534502,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,5]],"date-time":"2020-10-05T00:00:00Z","timestamp":1601856000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000180","name":"U.S. Department of Homeland Security","doi-asserted-by":"publisher","award":["D15PC00204"],"award-info":[{"award-number":["D15PC00204"]}],"id":[{"id":"10.13039\/100000180","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,5]]},"DOI":"10.1145\/3320269.3384755","type":"proceedings-article","created":{"date-parts":[[2020,10,5]],"date-time":"2020-10-05T16:33:22Z","timestamp":1601915602000},"page":"153-164","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["In-Network Filtering of Distributed Denial-of-Service Traffic with Near-Optimal Rule Selection"],"prefix":"10.1145","author":[{"given":"Devkishen","family":"Sisodia","sequence":"first","affiliation":[{"name":"University of Oregon, Eugene, OR, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jun","family":"Li","sequence":"additional","affiliation":[{"name":"University of Oregon, Eugene, OR, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lei","family":"Jiao","sequence":"additional","affiliation":[{"name":"University of Oregon, Eugene, OR, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,10,5]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"2005. Implementing BGP Flowspec. https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/routers\/asr9000\/software\/asr9k_r5-2\/routing\/configuration\/guide\/b_routing_cg52xasr9k\/b_routing_cg52xasr9k_chapter_011.html.  2005. Implementing BGP Flowspec. https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/routers\/asr9000\/software\/asr9k_r5-2\/routing\/configuration\/guide\/b_routing_cg52xasr9k\/b_routing_cg52xasr9k_chapter_011.html."},{"key":"e_1_3_2_2_2_1","unstructured":"2014. CAT 6500 and 7600 Series Routers and Switches TCAM Allocation Adjustment Procedures. http:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/switches\/catalyst-6500-series-switches\/117712-problemsolution-cat6500-00.html.  2014. CAT 6500 and 7600 Series Routers and Switches TCAM Allocation Adjustment Procedures. http:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/switches\/catalyst-6500-series-switches\/117712-problemsolution-cat6500-00.html."},{"key":"e_1_3_2_2_3_1","unstructured":"2016. A DDoS Event Against the RADb Service. https:\/\/www.impactcybertrust.org\/dataset_view?idDataset=576.  2016. A DDoS Event Against the RADb Service. https:\/\/www.impactcybertrust.org\/dataset_view?idDataset=576."},{"key":"e_1_3_2_2_4_1","unstructured":"2018. Configure Commonly Used IP ACLs. https:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/ip\/access-lists\/26448-ACLsamples.html.  2018. Configure Commonly Used IP ACLs. https:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/ip\/access-lists\/26448-ACLsamples.html."},{"key":"e_1_3_2_2_5_1","unstructured":"2019. Cisco Systems and Arbor: Effective DDoS Mitigation in Distributed Peering Environments. https:\/\/www.cisco.com\/c\/m\/en_us\/network-intelligence\/service-provider\/digital-transformation\/distributed-peering-architecture.html.  2019. Cisco Systems and Arbor: Effective DDoS Mitigation in Distributed Peering Environments. https:\/\/www.cisco.com\/c\/m\/en_us\/network-intelligence\/service-provider\/digital-transformation\/distributed-peering-architecture.html."},{"key":"e_1_3_2_2_6_1","unstructured":"2019. The CAIDA UCSD DDoS Attack 2007 Dataset. https:\/\/www.caida.org\/data\/passive\/ddos-20070804_dataset.xml.  2019. The CAIDA UCSD DDoS Attack 2007 Dataset. https:\/\/www.caida.org\/data\/passive\/ddos-20070804_dataset.xml."},{"key":"e_1_3_2_2_7_1","unstructured":"2019. University of Oregon Route Views Project. http:\/\/archive.routeviews.org.  2019. University of Oregon Route Views Project. http:\/\/archive.routeviews.org."},{"volume-title":"International Conference on Bioinspired Optimization Methods and their Applications (BIOMA).","year":"2004","author":"Alaya In\u00e8s","key":"e_1_3_2_2_8_1"},{"volume-title":"Mayday: Distributed Filtering for Internet Services. In USENIX Symposium on Internet Technologies and Systems (USITS).","year":"2003","author":"Andersen David G","key":"e_1_3_2_2_9_1"},{"volume-title":"Understanding the Mirai Botnet. In USENIX Security Symposium.","year":"2017","author":"Antonakakis Manos","key":"e_1_3_2_2_10_1"},{"volume-title":"USENIX Annual Technical Conference (ATC).","year":"2005","author":"Argyraki Katerina J","key":"e_1_3_2_2_11_1"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"crossref","unstructured":"Benjamin Armbruster J Cole Smith and Kihong Park. 2007. A Packet Filter Placement Problem with Application to Defense Against Spoofed Denial of Service Attacks. In European Journal of Operational Research (EJOR).  Benjamin Armbruster J Cole Smith and Kihong Park. 2007. A Packet Filter Placement Problem with Application to Defense Against Spoofed Denial of Service Attacks. In European Journal of Operational Research (EJOR).","DOI":"10.1016\/j.ejor.2005.09.031"},{"volume-title":"Customer-Triggered Real-Time Blackholes","author":"Battles Tim","key":"e_1_3_2_2_13_1"},{"volume-title":"Toward Understanding Distributed Blackhole Placement. In ACM Workshop on Rapid Malcode (WORM).","year":"2004","author":"Cooke Evan","key":"e_1_3_2_2_14_1"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281413"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"crossref","unstructured":"Marco Dorigo and Christian Blum. 2005. Ant Colony Optimization Theory: A Survey. In Theoretical Computer Science.  Marco Dorigo and Christian Blum. 2005. Ant Colony Optimization Theory: A Survey. In Theoretical Computer Science.","DOI":"10.1016\/j.tcs.2005.05.020"},{"volume-title":"Optimal Allocation of Filters Against DDoS Attacks. In Information Theory and Applications Workshop (ITA).","year":"2007","author":"Defrawy Karim El","key":"e_1_3_2_2_17_1"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"crossref","unstructured":"Stefka Fidanova. 2007. Ant Colony Optimization and Multiple Knapsack Problem. In Handbook of Research on Nature-Inspired Computing for Economics and Management.  Stefka Fidanova. 2007. Ant Colony Optimization and Multiple Knapsack Problem. In Handbook of Research on Nature-Inspired Computing for Economics and Management.","DOI":"10.4018\/978-1-59140-984-7.ch033"},{"key":"e_1_3_2_2_19_1","unstructured":"Franklin Djeumou Fomeni and Adam N Letchford. 2013. A Dynamic Programming Heuristic for the Quadratic Knapsack Problem. In INFORMS Journal on Computing (JOC).  Franklin Djeumou Fomeni and Adam N Letchford. 2013. A Dynamic Programming Heuristic for the Quadratic Knapsack Problem. In INFORMS Journal on Computing (JOC)."},{"volume-title":"Practical Verifiable In-network Filtering for DDoS Defense. In IEEE International Conference on Distributed Computing Systems (ICDCS).","year":"2019","author":"Gong Deli","key":"e_1_3_2_2_20_1"},{"volume-title":"SDX: A Software Defined Internet Exchange. In ACM SIGCOMM Computer Communication Review (CCR).","year":"2014","author":"Gupta Arpit","key":"e_1_3_2_2_21_1"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"crossref","unstructured":"Felipe Huici and Mark Handley. 2007. An Edge-to-Edge Filtering Architecture Against DoS. In ACM SIGCOMM Computer Communication Review (CCR).  Felipe Huici and Mark Handley. 2007. An Edge-to-Edge Filtering Architecture Against DoS. In ACM SIGCOMM Computer Communication Review (CCR).","DOI":"10.1145\/1232919.1232924"},{"volume-title":"Solving the Multi-Dimensional Multi-Choice Knapsack Problem with the Help of Ants. In International Conference on Swarm Intelligence (ICSI).","year":"2010","author":"Iqbal Shahrear","key":"e_1_3_2_2_23_1"},{"volume-title":"Online Scheduling of Traffic Diversion and Cloud Scrubbing with Uncertainty in Current Inputs. In ACM International Symposium on Mobile Ad Hoc Networking and Computing (MobiHoc).","year":"2019","author":"Jiao Lei","key":"e_1_3_2_2_24_1"},{"volume-title":"Flooding DDoS Mitigation and Traffic Management with Software Defined Networking. In IEEE International Conference on Cloud Networking (CloudNet).","year":"2015","author":"Kalliola Aapo","key":"e_1_3_2_2_25_1"},{"volume-title":"The Crossfire Attack. In IEEE Symposium on Security and Privacy (S&P).","year":"2013","author":"Kang Min Suk","key":"e_1_3_2_2_26_1"},{"volume-title":"SOS: An Architecture for Mitigating DDoS Attacks","year":"2004","author":"Keromytis Angelos D","key":"e_1_3_2_2_27_1"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"crossref","unstructured":"Min Kong Peng Tian and Yucheng Kao. 2008. A New Ant Colony Optimization Algorithm for the Multidimensional Knapsack Problem. In Computers & Operations Research.  Min Kong Peng Tian and Yucheng Kao. 2008. A New Ant Colony Optimization Algorithm for the Multidimensional Knapsack Problem. In Computers & Operations Research.","DOI":"10.1016\/j.cor.2006.12.029"},{"key":"e_1_3_2_2_29_1","unstructured":"Bernhard Korte and Rainer Schrader. [n.d.]. On the Existence of Fast Approximation Schemes. In Nonlinear Programming.  Bernhard Korte and Rainer Schrader. [n.d.]. On the Existence of Fast Approximation Schemes. In Nonlinear Programming."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2535372.2535398"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2631469"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"crossref","unstructured":"VC Li and Guy L Curry. 2005. Solving Multidimensional Knapsack Problems with Generalized Upper Bound Constraints using Critical Event Tabu Search. In Computers & Operations Research.  VC Li and Guy L Curry. 2005. Solving Multidimensional Knapsack Problems with Generalized Upper Bound Constraints using Critical Event Tabu Search. In Computers & Operations Research.","DOI":"10.1016\/j.cor.2003.08.021"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"crossref","unstructured":"Xin Liu Xiaowei Yang and Yanbin Lu. 2008. To Filter or to Authorize: Network-Layer DoS Defense Against Multimillion-Node Botnets. In ACM SIGCOMM Computer Communication Review (CCR).  Xin Liu Xiaowei Yang and Yanbin Lu. 2008. To Filter or to Authorize: Network-Layer DoS Defense Against Multimillion-Node Botnets. In ACM SIGCOMM Computer Communication Review (CCR).","DOI":"10.1145\/1402958.1402981"},{"volume-title":"MiddlePolice: Toward enforcing destination-defined policies in the middle of the Internet","author":"Liu Zhuotao","key":"e_1_3_2_2_34_1"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"crossref","unstructured":"Michael J Magazine and Maw-Sheng Chern. 1984. A Note on Approximation Schemes for Multidimensional Knapsack Problems. In Mathematics of Operations Research.  Michael J Magazine and Maw-Sheng Chern. 1984. A Note on Approximation Schemes for Multidimensional Knapsack Problems. In Mathematics of Operations Research.","DOI":"10.1287\/moor.9.2.244"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"crossref","unstructured":"Nick McKeown Tom Anderson Hari Balakrishnan Guru Parulkar Larry Peterson Jennifer Rexford Scott Shenker and Jonathan Turner. 2008. OpenFlow: Enabling Innovation in Campus Networks. In ACM SIGCOMM Computer Communication Review (CCR).  Nick McKeown Tom Anderson Hari Balakrishnan Guru Parulkar Larry Peterson Jennifer Rexford Scott Shenker and Jonathan Turner. 2008. OpenFlow: Enabling Innovation in Campus Networks. In ACM SIGCOMM Computer Communication Review (CCR).","DOI":"10.1145\/1355734.1355746"},{"key":"e_1_3_2_2_37_1","unstructured":"A. Mortensen T. Reddy F. Andreasen N. Teague and R. Compton. 2019. Distributed-Denial-of-Service Open Threat Signaling (DOTS) Architecture. Internet Engineering Task Force (2019).  A. Mortensen T. Reddy F. Andreasen N. Teague and R. Compton. 2019. Distributed-Denial-of-Service Open Threat Signaling (DOTS) Architecture. Internet Engineering Task Force (2019)."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.5"},{"volume-title":"A Tutorial and Survey","author":"Pagiamtzis Kostas","key":"e_1_3_2_2_39_1"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"crossref","unstructured":"David Pisinger. 2005. Where are the Hard Knapsack Problems?. In Computers & Operations Research.  David Pisinger. 2005. Where are the Hard Knapsack Problems?. In Computers & Operations Research.","DOI":"10.1016\/j.cor.2004.03.002"},{"volume-title":"SENSS Against Volumetric DDoS Attacks. In Annual Computer Security Applications Conference (ACSAC).","year":"2018","author":"Ramanathan Sivaramakrishnan","key":"e_1_3_2_2_41_1"},{"volume-title":"The Catch-22 Attack. In Annual Computer Security Applications Conference (ACSAC).","year":"2019","author":"Shi Lumin","key":"e_1_3_2_2_42_1"},{"volume-title":"Optimal Source-based Filtering of Malicious Traffic","author":"Soldo Fabio","key":"e_1_3_2_2_43_1","doi-asserted-by":"crossref","DOI":"10.1109\/TNET.2011.2161615"},{"volume-title":"The Coremelt Attack. In European Symposium on Research in Computer Security (ESORICS).","year":"2009","author":"Studer Ahren","key":"e_1_3_2_2_44_1"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"crossref","unstructured":"Dirk Sudholt and Christian Thyssen. 2012. Running Time Analysis of Ant Colony Optimization for Shortest Path Problems. In Journal of Discrete Algorithms.  Dirk Sudholt and Christian Thyssen. 2012. Running Time Analysis of Ant Colony Optimization for Shortest Path Problems. In Journal of Discrete Algorithms.","DOI":"10.1016\/j.jda.2011.06.002"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2016.7524500"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155493"},{"volume-title":"In-Network Filtering of Distributed Denial-of-Service Traffic. In IFIP\/IEEE Symposium on Integrated Network and Service Management (IM).","year":"2019","author":"Zhang Mingwei","key":"e_1_3_2_2_48_1"},{"volume-title":"An Adaptable Rule Placement for Software-Defined Networks. In IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN).","year":"2014","author":"Zhang Shuyuan","key":"e_1_3_2_2_49_1"}],"event":{"name":"ASIA CCS '20: The 15th ACM Asia Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Taipei Taiwan","acronym":"ASIA CCS '20"},"container-title":["Proceedings of the 15th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3320269.3384755","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3320269.3384755","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:41:28Z","timestamp":1750200088000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3320269.3384755"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,5]]},"references-count":49,"alternative-id":["10.1145\/3320269.3384755","10.1145\/3320269"],"URL":"https:\/\/doi.org\/10.1145\/3320269.3384755","relation":{},"subject":[],"published":{"date-parts":[[2020,10,5]]},"assertion":[{"value":"2020-10-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}