A New Scheme for IP Traceback under DoS Attack

摘要：

The problem of identifying the sources of a Denial of Service attack is among the hardest in the Internet security area, since attackers often use spoofed source IP addresses. This paper presents a new scheme called MAC-based probabilistic packet marking (MPPM) for IP Traceback under DoS attack. A router marks the packets stochastically with fragments of an edge composed of itself and the next hop router. Message authentication code (MAC) is used to link and authenticate fragments of routers addresses in the marked attack packets. The main advantage of MPPM over known PPM schemes includes less attack packets required to converge, linear computation overhead and more precision. Moreover the optional authentication mechanism provides robustness against faked marks.MPPM also features low router cost and supports incremental deployment.

关键词： DDoS IP traceback probabilistic packet marking

作者: Tian Haitao Huang Liusheng Lei Yunfei Chen Guoliang

作者单位: Department of Computer Science and Technology University of Science and Technology of China, Hefei, 230027, China

会议类型: 国际会议

会议名称: Proceedings of The Fourth International Conference on Parallel and Distribyted Computing,Applications and Technologies(第四届并行与分布式计算应用与技术国际会议)

会议地点: 成都

会议语种:英文

页码: 189-193

在线出版日期: 2003-08-27（万方平台首次上网日期，不代表论文的发表时间）