A Fast Deterministic Packet Marking Scheme for IP Traceback

被引:1
|
作者
Wang Xiao-jing [1 ]
Hu Chang-zhen [1 ]
Hu He [1 ]
机构
[1] Beijing Inst Technol, Lab Comp Network Def Technol, Beijing 100081, Peoples R China
关键词
network security; distributed denial of service; IP traceback; deterministic packet marking;
D O I
10.1109/MINES.2009.200
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
A Fast Deterministic Packet Marking scheme (FDPM) for IP traceback against distributed denial of service attacks is presented, which applies a novel marking algorithm and significantly improves IP traceback in two aspects: (1) the victim doesn't need to accommodate fragments for recovery, so it needs several packets to identify an ingress router with lower false positives; (2) FDPM can scales to large distributed attacks with thousands of attackers. Theoretical analysis and the pseudo code are provided. Compared with previous DPM schemes, average convergence time of FDPM decreased by 86.3% packets or even more. Therefore FDPM is more efficient and represents a step forward in performance.
引用
收藏
页码:526 / 529
页数:4
相关论文
共 50 条
  • [31] Feasible DDoS attack source traceback scheme by deterministic multiple packet marking mechanism
    S. Suresh
    N. Sankar Ram
    The Journal of Supercomputing, 2020, 76 : 4232 - 4246
  • [32] Toward a practical packet marking approach for IP traceback
    Gong, Chao
    Sarac, Kamil
    International Journal of Network Security, 2009, 8 (03): : 271 - 281
  • [33] Advanced packet marking mechanism with pushback for IP traceback
    Lee, HW
    APPLIED CRYPTOGRAPHY AND NETWORK SECURITY, PROCEEDINGS, 2004, 3089 : 426 - 438
  • [34] Survey on Packet Marking Fields and Information for IP Traceback
    Vasseur, Marion
    Khatoun, Rida
    Serhrouchni, Ahmed
    2015 INTERNATIONAL CONFERENCE ON PROTOCOL ENGINEERING (ICPE) AND INTERNATIONAL CONFERENCE ON NEW TECHNOLOGIES OF DISTRIBUTED SYSTEMS (NTDS), 2015,
  • [35] Modifications of Probabilistic packet marking schemes for IP traceback
    Lin, JH
    Xiao, W
    8TH WORLD MULTI-CONFERENCE ON SYSTEMICS, CYBERNETICS AND INFORMATICS, VOL XI, PROCEEDINGS: CONTROL, COMMUNICATION AND NETWORK SYSTEMS, TECHNOLOGIES AND APPLICATIONS, 2004, : 89 - 91
  • [36] Two novel packet marking schemes for IP traceback
    Hu, Hanping
    Wang, Yi
    Wang, Lingfei
    Guo, Wenxuan
    Ding, Mingyue
    AUTONOMIC AND TRUSTED COMPUTING, PROCEEDINGS, 2006, 4158 : 459 - 466
  • [37] Survey on Packet Marking Fields and Information for IP Traceback
    Vasseur, Marion
    Chen, Xiuzhen
    Khatoun, Rida
    Serhrouchni, Ahmed
    2015 INTERNATIONAL CONFERENCE ON CYBER SECURITY OF SMART CITIES, INDUSTRIAL CONTROL AND COMMUNICATIONS (SSIC), 2015,
  • [38] Dynamic probabilistic packet marking for efficient IP traceback
    Liu, Jenshiuh
    Lee, Zhi-Jian
    Chung, Yeh-Ching
    COMPUTER NETWORKS, 2007, 51 (03) : 866 - 882
  • [39] Tabu marking scheme to speedup IP traceback
    Ma, Miao
    COMPUTER NETWORKS, 2006, 50 (18) : 3536 - 3549
  • [40] IP traceback by packet marking method with bloom filters
    Takurou, Hosoi
    Matsuura, Kanta
    Mai, Hideki
    41ST ANNUAL IEEE INTERNATIONAL CARNAHAN CONFERENCE ON SECURITY TECHNOLOGY, PROCEEDINGS, 2007, : 255 - +