Developing and implementing IHPM on IXP 425 network processor platforms

Authors:
Bo-Chao Cheng;Ching-Fu Huang;Wei-Chi Chang;Cheng-Shong Wu
Affiliations:
Institute of Communications Engineering, National Chung Cheng University, Chia-yi, Taiwan;Institute of Communications Engineering, National Chung Cheng University, Chia-yi, Taiwan;Institute of Communications Engineering, National Chung Cheng University, Chia-yi, Taiwan;Department of Electrical Engineering, National Chung Cheng University, Chia-yi, Taiwan
Venue:
WISA'05 Proceedings of the 6th international conference on Information Security Applications
Year:
2005

Citing 4
Cited 0

Graphs: theory and algorithms

Graphs: theory and algorithms
Using router stamping to identify the source of IP packets

Proceedings of the 7th ACM conference on Computer and communications security
Network support for IP traceback

IEEE/ACM Transactions on Networking (TON)
Linux Network Architecture

Linux Network Architecture

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper describes a technique for tracing attacks back toward the attackers somewhere in the Internet. There are many solutions existing for IP traceback problem, such as packet marking and algebraic approach. Many of them are not efficient and work under some unreasonable assumptions. The “Island Hopping Packet Marking (IHPM)” algorithm, truly incorporating the combination of the best features of the edge/node sampling and the cut vertex, is able to counter those disputed assumptions and provides great performance to reconstruct attacking paths with fewer collected packets under multiple attacks. The assessing of IHPM performance on IXP425 network processor shows the practical feasibility in routers implementations. Such a technique can provide a key answer required for advancing the state-of-the-art in DDoS mitigation and defenses in a realistic environment.