Abstract:IP traceback can be used to find direct generator(s) and path(s) of attacking traffic. Probabilistic marking schemes, as one type of IP traceback technologies, have been most studied, but they are difficult to fast reconstruct attacking path(s) and defend against spoofed marks generated by attacking source(s). In this paper, we present Adaptive Probabilistic Marking scheme (APM). In APM, when each packet enters the first-hop router, its TTL value is set to a uniform value, and when it is forwarded by routers in the network, each intermediate router decreases the TTL value by one. Consequently, each intermediate router may infer the router-level hop number that each packet has already traveled, and then correspondingly marks the packet with the probability inversely proportional to the router-level hop number. APM is focused on the probability with which a router marks a packet, and APM can cooperate with other probabilistic marking schemes. NS2 simulation experiments prove that, in APM, the time for the victim to receive necessary marks for the path reconstruction is reduced by more than 20% compared with existing probabilistic marking schemes, and spoofed marks cannot reach the victim and influence the traceback process.

A LIGHTWEIGHT IP TRACEBACK SCHEME BASED ON AUTONOMOUS SYSTEM NUMBER

Research of Improved Probabilistic Packet Marking Algorithms

Across-Domain Deterministic Packet Marking For Ip Traceback

Distributed-Log-based Scheme for IP Traceback

A Probabilistic Marking Scheme for Fast Traceback

A Real-Time Traceback Scheme for DDoS Attacks

A Logless Fast IP Traceback Scheme Against DDoS Attacks

A New Scheme for Ip Traceback under Dos Attack

An Adaptive Probabilistic Marking Scheme for Fast and Secure Traceback

An adaptive edge marking based hierarchical IP traceback system

Deterministic packet marking based on redundant decomposition for IP traceback

IP Traceback Scheme Based on Reverse Node Sampling

A Distributed-Log-based IP Traceback Scheme to Defeat DDoS Attacks

Autonomous System-Based Marking Scheme for Internet Traceback

A Coding-Based Incremental Traceback Scheme Against DDoS Attacks in MANET

A TCP-Friendly Fair Packet Marking Algorithm in DiffServ

Improved Marking Model ERPPM Tracing Back to DDoS Attacker

Reverse-validation-based IP Traceback Scheme Against DDoS Attacks

Stable Topology Support for Tracing DDoS Attackers in MANET

DDoS Traceback Scheme Based on Real-Time Consideration

On The Performance Of Probabilistic Packet Marking For Traceback In Sensor Networks