Abstract:IP traceback can be used to find direct generator(s) and path(s) of attacking traffic. Probabilistic marking schemes, as one type of IP traceback technologies, have been most studied, but they are difficult to fast reconstruct attacking path(s) and defend against spoofed marks generated by attacking source(s). In this paper, we present Adaptive Probabilistic Marking scheme (APM). In APM, when each packet enters the first-hop router, its TTL value is set to a uniform value, and when it is forwarded by routers in the network, each intermediate router decreases the TTL value by one. Consequently, each intermediate router may infer the router-level hop number that each packet has already traveled, and then correspondingly marks the packet with the probability inversely proportional to the router-level hop number. APM is focused on the probability with which a router marks a packet, and APM can cooperate with other probabilistic marking schemes. NS2 simulation experiments prove that, in APM, the time for the victim to receive necessary marks for the path reconstruction is reduced by more than 20% compared with existing probabilistic marking schemes, and spoofed marks cannot reach the victim and influence the traceback process.

Across-Domain Deterministic Packet Marking For Ip Traceback

Research of Improved Probabilistic Packet Marking Algorithms

Deterministic packet marking based on redundant decomposition for IP traceback

A LIGHTWEIGHT IP TRACEBACK SCHEME BASED ON AUTONOMOUS SYSTEM NUMBER

A Probabilistic Marking Scheme for Fast Traceback

An adaptive edge marking based hierarchical IP traceback system

Improved Marking Model ERPPM Tracing Back to DDoS Attacker

An Adaptive Probabilistic Marking Scheme for Fast and Secure Traceback

Distributed-Log-based Scheme for IP Traceback

A Real-Time Traceback Scheme for DDoS Attacks

A New Scheme for Ip Traceback under Dos Attack

Autonomous System-Based Marking Scheme for Internet Traceback

Packet Payload Based Anomalous Network Intrusion Detection

A Logless Fast IP Traceback Scheme Against DDoS Attacks

On The Performance Of Probabilistic Packet Marking For Traceback In Sensor Networks

A Distributed-Log-based IP Traceback Scheme to Defeat DDoS Attacks

A TCP-Friendly Fair Packet Marking Algorithm in DiffServ

A Coding-Based Incremental Traceback Scheme Against DDoS Attacks in MANET

Stable Topology Support for Tracing DDoS Attackers in MANET

DTRadar: Accelerating Search Process of Decision Trees in Packet Classification.

Strategies for Tracking Individual IP Packets Towards DDoS