Title
A deterministic packet marking scheme for tracing multiple Internet attackers
Abstract
Deterministic packet marking (DPM) has recently been proposed as an alternative approach for IP traceback. It requires no extra bandwidth and is backward compatible with Internet equipments that do not implement it. Moreover, service providers can implement it without revealing their internal network topology. Unfortunately, the false positive rate could be very high if multiple hosts use the same source address to attack the victim simultaneously. Even worse, no source is identified if attackers change their source addresses for every packet they send. These two problems can be solved with a modified DPM scheme which we called DPM with address digest (DPM-AD). We found that the false positive rate of the DPM-AD scheme could be much higher than it was claimed when the number of ingress router interfaces is larger than the number of attackers. In this paper, we propose and evaluate the false positive rate of a novel DPM scheme that is much more scalable than the DPM-AD scheme. Our analysis and simulation results show that the proposed DPM scheme can trace 1K simultaneous attackers at a false positive rate less than 0.5% with acceptable reconstruction complexity.
Year
DOI
Venue
2005
10.1109/ICC.2005.1494471
ICC
Keywords
Field
DocType
internal network topology,address digest,source address,deterministic packet marking scheme,reconstruction complexity,internet,multiple internet attacker tracing,router interfaces,telecommunication security,telecommunication traffic,service providers,network topology,filtering,bandwidth,false positive rate,protocols,service provider,degradation
False positive rate,Computer science,Network packet,Computer network,Network topology,IP traceback,Bandwidth (signal processing),Ingress router,Backward compatibility,Scalability
Conference
Volume
ISSN
ISBN
2
1550-3607
0-7803-8938-7
Citations 
PageRank 
References 
4
0.47
7
Authors
3
Name
Order
Citations
PageRank
Tsern-Huei Lee124430.63
Tze-Yau William Huang271.52
Iven Lin350.83