Towards Stateless Single-Packet IP Traceback

10 years 7 months ago
Towards Stateless Single-Packet IP Traceback
The current Internet architecture allows malicious nodes to disguise their origin during denial-of-service attacks with IP spoofing. A well-known solution to identify these nodes is IP traceback. In this paper, we introduce and analyze a light-weight single-packet IP traceback system that does not store any data in the network core. The proposed system relies on a novel data structure called Generalized Bloom Filter, which is tamper resistant. In addition, an efficient improved path reconstruction procedure is introduced and evaluated. Analytical and simulation results are presented to show the effectiveness of the proposed scheme. The simulations are performed in an Internet-based scenario and the results show that the proposed system locates the real attack path with high accuracy.
Rafael P. Laufer, Pedro B. Velloso, Daniel de Oliv
Added 04 Jun 2010
Updated 04 Jun 2010
Type Conference
Year 2007
Where LCN
Authors Rafael P. Laufer, Pedro B. Velloso, Daniel de Oliveira Cunha, Igor M. Moraes, Marco D. D. Bicudo, Marcelo D. D. Moreira, Otto Carlos Muniz Bandeira Duarte
Comments (0)