Design and implementation of a real-time decentralized sourceidentification system for untrusted IP packets

摘要

DECIDUOUS is a security management framework for identifying then“true” sources of network-based intrusions. As in IPv4,nnormally the source IP address field of an IP packet is untrusted.nTherefore, DECIDUOUS utilizes the IPSec security associations asn“trapdoors” to derive possible network paths that an attacknpacket has traveled to reach the target victim. In (Chang et al., 1999),nwe illustrated the architecture and design of the DECIDUOUS framework.nIn this paper, we describe our prototype implementation and experimentalnresults