IP traceback techniques for intrusion tracking

Denial of Service (DoS) is currently considered to be one of the most common types of Internet security attack. DoS attacks usually destroy the service-providing ability of web servers by consuming their resources, thus preventing legitimate users from receiving the expected services from them. Different access control and intrusion detection technologies have been developed for preventing and detecting these kinds of network attacks. Unfortunately, DoS attackers can hide their true identity by forging the IT address of attack packets, Therefore, in addition to detection, IP traceback techniques are needed in order to identify the true origin of the attack packets and to provide the capability to take action against the attackers. This paper examines some proposed IP traceback techniques and discusses their feasibility and limitations.