Abstract
The rising threat of cyber attacks, especially distributed denial-of-service (DDos), makes the IP traceback problem very relevant to today’s Internet security. In this paper, a novel deterministic packet marking scheme called PN-DPM for IP traceback is presented. Through a unique technique: path numbering, our scheme provides ISPs a feasible solution to make IP traceback as a value-added network service, which allows the victim not only to detect and filter spoofed DDOS attacks immediately, but also to obtain more accurate information about the source of the attacks from the corresponding ISPs by the authenticated marks, even after the attacks has been completed. Our techniques feature low network and router overhead, low computational load for victim, and support incremental deployment. In contrast to previous work, our technique has significantly higher feasibility by considering much more aspects of IP traceback technology from practical perspective.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Belenky, A., Ansari, N.: IP Traceback with Deterministic Packet Marking. In: IEEE Communications Letters, pp. 162–164 (2003)
Belenky, A., Ansari, N.: Tracing multiple attackers with deterministic packet marking (DPM). In: Proc. IEEE Pacific Rim Conf. Commun.,Comp. and Sig., pp. 49–52. IEEE Computer Society Press, Los Alamitos (2003)
Belenky, A., Ansari, N.: Accommodating fragmentation with deterministic packet marking for IP traceback. In: Proc. IEEE GLOBECOM, pp. 374–1378. IEEE Computer Society Press, Los Alamitos (2003)
Gao, Z., Ansari, N.: Tracing cyber attacks from the practical perspective. IEEE Commun. Mag., 123–131 (2005)
Fu-Yuan, L., Shiuhpyng, S.: Denfending against spoofed DDoS attacks with path fingerprint. Computers & Security 24, 571–586 (2005)
Sung, M., Xu, J.: IP traceback-based intelligent packet filtering: a novel technique for defending against internet DDoS attacks. IEEE Transactions on Parallel and Distributed Systems 14(9), 861–872 (2003)
Savage, S., Wetherall, D., Karlin, A., Anderson, T.: Network support for IP traceback. IEEE/ACM Trans. Networking, 226-237 (2001)
Dae-Sun, K., Choong-eon, H., Yu, X.: An Intelligent Approach of Packet Marking at Edge Router for IP Traceback. Lecture Notes in Artificial Intelligence, 303–309 (2005)
Perrig, A., Canetti, R., Song, D., Tygar, D.: Efficient and secure source authentication for multicast. In: Network and Distributed System Security Symposium (2001)
Feller, W.: An introduction to Probability Theory and its Applications, 3rd edn. Addison- Wesley, Reading (1968)
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Peng, D., Shi, Z., Tao, L., Ma, W. (2007). Enhanced and Authenticated Deterministic Packet Marking for IP Traceback. In: Xu, M., Zhan, Y., Cao, J., Liu, Y. (eds) Advanced Parallel Processing Technologies. APPT 2007. Lecture Notes in Computer Science, vol 4847. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-76837-1_55
Download citation
DOI: https://doi.org/10.1007/978-3-540-76837-1_55
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-76836-4
Online ISBN: 978-3-540-76837-1
eBook Packages: Computer ScienceComputer Science (R0)