Author(s)

Yan Wang, Lingdi Ping

Dept. of Information Technology and Management Zhejiang Police Vocational Academy.
Visiting scholar, College of Computer Science Zhejiang University Hangzhou Zhejiang, China; College of Computer Science and Technology Zhejiang University Hangzhou Zhejiang, China.

IP traceback is the technology to control Internet crime. A promising solution to IP traceback is probabilistic packet marking (PPM). In this paper we present a novel and practical IP traceback algorithm which can improve the PPM convergency and computational overhead. This scheme may also reduce the deployment overhead without requiring the participation of all routers on the attack path. It has been used not only to trace Distributed Denial of Service (DDoS) attacking packets but also to enhance filtering attacking traffic. It has wide applications for other security systems. To the best of our knowledge, this thesis is the first of its kind considering the impact of packet loss in designing packet marking scheme.

DoS; DDoS; IP traceback; spoofing