Traceroute based Target Link Flooding Attack Detection Scheme by Analyzing Hop Count to the Destination

摘要

Recently, the detection of target link flooding attack which is a new type of DDoS (Distributed Denial of Service) is required. Among several schemes for target link flooding attack, the scheme focusing on traceroute is gathering attention. That scheme detects the attack by finding rapid increase of traceroute. However, it cannot work when attacker's traceroute ratio is low. In this paper, we propose traceroute-based target link flooding attack detection scheme by analyzing hop count to the destination. By analyzing the number of traceroutes per hop counts, the change can be emphasized. By computer simulations, we show that our scheme has more robustness compared with the conventional scheme.