Extended probabilistic packet marking scheme for IP traceback

Abstract

Defending against distributed denial-of-service attacks is one of the hardest security problems on the Internet today. One difficulty toward these attacks is to trace the path of the attacks to the source because the attackers often use spoofed IP addresses to disguise the origin. One of the most promising solutions to this tracing problem is probabilistic packet marking scheme. We present new packet marking technique based on that, which reduces the computation overhead at the victim host by making source host information be included in attack path data and adjusting routers packet marking probability. Our techniques feature low network and router overhead, and support incremental deployment.