Hop label based probabilistic packet marking approach for IP traceback addressing IP spoofing

摘要

Coping with DDoS Attacks, which have been threating our society, is one of the most important issues related to network security. It is said that the most effective method to block out DDoS traffic is a packet filtering at routers nearest to the attackers. To carry out the above filtering, IP Traceback method is almost mandatory because DDoS attackers often spoof their IP addresses (IP Spoofing). Edge Sample based Prbabilistic Packet Marking, a promising IP Traceback method, shows relatively low detection efficiency and high false-positive results during transient phase. In this paper, we propose Hop Label based Prababilistic Packet Marking to solve these problems. And, we verify the effectiveness of our method with simulation.