Spanning Tree Search Model to Traceback DDoS Attack using Netflow

摘要

Distributed Denial of Service(DDoS) recently damaged many web sites in the world, and it became one of the most serious problems in the Internet To protect the Internet from DDoS, it is recommended to use a firewall system or an intrusion detection system(IDS). But they are not able to protect the whole Internet from DDoS because DDoS usually happens at different places simultaneously. The difficulty of preventing DDoS is that DDoS attack uses spoofed IP address. In this paper, we propose a model which can automatically trace back DDoS attack source system regardless of IP spoofing.