Tracers placement for IP traceback against DDoS attacks

Authors:
Chun-Hsin Wang;Chang-Wu Yu;Chiu-Kuo Liang;Kun-Min Yu;Wen Ouyang;Ching-Hsien Hsu;Yu-Guang Chen
Affiliations:
Chung Hua University, Hsin Chu, Taiwan, R.O.C.;Chung Hua University, Hsin Chu, Taiwan, R.O.C.;Chung Hua University, Hsin Chu, Taiwan, R.O.C.;Chung Hua University, Hsin Chu, Taiwan, R.O.C.;Chung Hua University, Hsin Chu, Taiwan, R.O.C.;Chung Hua University, Hsin Chu, Taiwan, R.O.C.;Chung Hua University, Hsin Chu, Taiwan, R.O.C.
Venue:
Proceedings of the 2006 international conference on Wireless communications and mobile computing
Year:
2006

Citing 10
Cited 1

Network support for IP traceback

IEEE/ACM Transactions on Networking (TON)
Single-packet IP traceback

IEEE/ACM Transactions on Networking (TON)
A practical method to counteract denial of service attacks

ACSC '03 Proceedings of the 26th Australasian computer science conference - Volume 16
BRITE: An Approach to Universal Topology Generation

MASCOTS '01 Proceedings of the Ninth International Symposium in Modeling, Analysis and Simulation of Computer and Telecommunication Systems
A taxonomy of DDoS attack and DDoS defense mechanisms

ACM SIGCOMM Computer Communication Review
Scalable multicast based filtering and tracing framework for defeating distributed DoS attacks

International Journal of Network Management
Graph Theory With Applications

Graph Theory With Applications
Centertrack: an IP overlay network for tracking DoS floods

SSYM'00 Proceedings of the 9th conference on USENIX Security Symposium - Volume 9
Defending against flooding-based distributed denial-of-service attacks: a tutorial

IEEE Communications Magazine
On IP traceback

IEEE Communications Magazine

Simulation for intrusion-resilient, DDoS-resistant authentication system (IDAS)

Proceedings of the 2008 Spring simulation multiconference

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper explores the tracers deployment problem for IP traceback methods how many and where the tracers should be deployed in the network to be effective for locating the attack origins. The minimizing the number of tracers deployment problems depended on locating the attack origins are defined. The problem is proved to be NP-complete. A heuristic method which can guarantee that the distance between any attack origin and its first met tracer be within an assigned distance is proposed. The upper bound for the probability of an undetected attack node can be calculated in advance and used to evaluate the number of tracers needed for the proposed heuristic method. Extended simulations are performed to study the performance of the tracers deployment.