A More Practical Approach for Single-Packet IP Traceback using Packet Logging and Marking

Tracing IP packets back to their origins is an important step in defending the Internet against denial-of-service (DoS) attacks. Two kinds of IP traceback techniques have been proposed as packet marking and packet logging approaches. In packet marking, routers probabilistically write their identification information into the forwarded packets. This approach incurs little overhead but requires a large flow of packets to collect the complete path information. In packet logging, routers record the digests of the forwarded packets. This approach makes it possible to trace even a single packet and, hence, is considered more powerful. At routers forwarding a large volume of traffic, however, the high storage overhead and access time requirement for recording packet digests introduce practicality problems. In this paper, we present a novel scheme to improve the practicality of log-based IP traceback by reducing its overhead on routers. Our approach makes an intelligent use of packet marking t...

• Type: Journal
• Year: 2008
• Where: TPDS
• Authors: Chao Gong, Kamil Saraç
• Keywords: IP Traceback, Log-based Ip Traceback, Routers, TPDS 2008