A Fast Deterministic Packet Marking Scheme for IP Traceback

摘要：

A Fast Deterministic Packet Marking scheme (FDPM) for IP traceback against distributed denial of service attacks is presented, which applies a novel marking algorithm and significantly improves IP traceback in two aspects: (1) the victim doesnt need to accommodate fragments for recovery, so it needs several packets to identify an ingress router with lower false positives; (2) FDPM can scales to large distributed attacks with thousands of attackers. Theoretical analysis and the pseudo code are provided. Compared with previous DPM schemes, average convergence time of FDPM decreased by 86.3％ packets or even more. Therefore FDPM is more efficient and represents a step forward in performance.

关键词： network security distributed denial of service IP traceback deterministic packet marking

作者: Wang Xiao-jing Hu Chang-zhen Hu he

作者单位: Lab of Computer Network Defense Technology, Beijing Institute of Technology, Beijing 100081, China X Lab of Computer Network Defense Technology, Beijing Institute of Technology, Beijing 100081, China

会议类型: 国际会议

会议名称: The First International Conference on Multimedia Information Networking and Security(第一届国际多媒体网络信息安全会议 MINES 2009)

会议地点: 武汉

会议语种:英文

页码: 1208-1211

在线出版日期: 2009-11-18（万方平台首次上网日期，不代表论文的发表时间）