Performance analysis of probabilistic packet marking in IPv6
Computer Communications
An Authentication Based Source Address Spoofing Prevention Method Deployed in IPv6 Edge Network
ICCS '07 Proceedings of the 7th international conference on Computational Science, Part IV: ICCS 2007
Design of the host guard firewall for network protection
ISP'08 Proceedings of the 7th WSEAS international conference on Information security and privacy
Distributed packet pairing for reflector based DDoS attack mitigation
Computer Communications
| Hi-index | 0.00 |
Recently, several schemes have been proposed for IPtraffic source identification for tracing denial of service(DoS) attacks. Most of these schemes require very largenumber of packets to conduct the traceback process, whichresults in lengthy and complicated procedure. In this paper,we address this issue by proposing a new scheme, calledProbabilistic Pipelined Packet Marking (PPPM), which employsthe concept of "pipeline" for propagating markinginformation from one marking router to another so that iteventually reaches the destination. The key benefit of thispipeline process lies in drastically reducing the number ofpackets that is required for the traceback process. We evaluatethe effectiveness of the proposed scheme for variousperformance metrics through combination of analytical andsimulation studies. Our studies show that the proposedscheme offers high attack source detection percentage, andattack source localization distance of less than two hops underdifferent attack scenarios.