Abstract:IP traceback can be used to find direct generator(s) and path(s) of attacking traffic. Probabilistic marking schemes, as one type of IP traceback technologies, have been most studied, but they are difficult to fast reconstruct attacking path(s) and defend against spoofed marks generated by attacking source(s). In this paper, we present Adaptive Probabilistic Marking scheme (APM). In APM, when each packet enters the first-hop router, its TTL value is set to a uniform value, and when it is forwarded by routers in the network, each intermediate router decreases the TTL value by one. Consequently, each intermediate router may infer the router-level hop number that each packet has already traveled, and then correspondingly marks the packet with the probability inversely proportional to the router-level hop number. APM is focused on the probability with which a router marks a packet, and APM can cooperate with other probabilistic marking schemes. NS2 simulation experiments prove that, in APM, the time for the victim to receive necessary marks for the path reconstruction is reduced by more than 20% compared with existing probabilistic marking schemes, and spoofed marks cannot reach the victim and influence the traceback process.

An adaptive edge marking based hierarchical IP traceback system

Research of Improved Probabilistic Packet Marking Algorithms

Distributed-Log-based Scheme for IP Traceback

An Adaptive Probabilistic Marking Scheme for Fast and Secure Traceback

A Probabilistic Marking Scheme for Fast Traceback

A Distributed-Log-based IP Traceback Scheme to Defeat DDoS Attacks

Reverse-validation-based IP Traceback Scheme Against DDoS Attacks

A New Scheme for Ip Traceback under Dos Attack

Across-Domain Deterministic Packet Marking For Ip Traceback

Deterministic packet marking based on redundant decomposition for IP traceback

A Real-Time Traceback Scheme for DDoS Attacks

A LIGHTWEIGHT IP TRACEBACK SCHEME BASED ON AUTONOMOUS SYSTEM NUMBER

A Coding-Based Incremental Traceback Scheme Against DDoS Attacks in MANET

IP Traceback Scheme Based on Reverse Node Sampling

Autonomous System-Based Marking Scheme for Internet Traceback

Improved Marking Model ERPPM Tracing Back to DDoS Attacker

A Logless Fast IP Traceback Scheme Against DDoS Attacks

Stable Topology Support for Tracing DDoS Attackers in MANET

An IP traceback assisted hierarchical defense overlay against DDoS attacks

Hiding and Trapping: A Deceptive Approach for Defending against Network Reconnaissance with Software-Defined Network

DDoS Traceback Scheme Based on Real-Time Consideration