Advanced n based Packet Marking Mechanism for IP Traceback


Lee Hyung-Woo, Journal of Information Processing Systems Vol. 6, No. 1, pp. 13-26, Feb. 2005  


Keywords: Packet Marking, DDoS attack, IP Traceback, Network Security
Fulltext:

Abstract

Distributed Denial-of-Service(DDoS) attack prevent users from accessing services on the target network by spoofing its origin source address with a large volume of traffic. The objective of IP Traceback is to determine the real attack sources, as well as the full path taken by the attack packets. Existing IP Traceback methods can be categorized as proactive or reactive tracing. Existing PPM based tracing scheme(such as router node appending, sampling and edge sampling) insert traceback information in IP packet header for IP Traceback. But, these schemes did not provide enhanced performance in DDoS attack. In this paper, we propose a 'TTL based advanced Packet Marking' mechanism for IP Traceback. Proposed mechanism can detect and control DDoS traffic on router and can generate marked packet for reconstructing origin DDoS attack source, by which we can diminish network overload and enhance traceback performance.


Statistics
Show / Hide Statistics

Statistics (Past 3 Years)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.




Cite this article
[APA Style]
Hyung-Woo, L. (2005). Advanced n based Packet Marking Mechanism for IP Traceback. Journal of Internet Computing and Services, 6(1), 13-26.

[IEEE Style]
L. Hyung-Woo, "Advanced n based Packet Marking Mechanism for IP Traceback," Journal of Internet Computing and Services, vol. 6, no. 1, pp. 13-26, 2005.

[ACM Style]
Lee Hyung-Woo. 2005. Advanced n based Packet Marking Mechanism for IP Traceback. Journal of Internet Computing and Services, 6, 1, (2005), 13-26.