Bloom filter-based IP Traceback on Netfilter open-source framework

Abstract

Routing only based on destination IP address is one of the major potential threats of current Internet routers that enables attackers to attack victims from forged sources. IP packet Traceback is one of the important defense mechanisms against Denial of Service (DoS) attacks because it traces packets from source to destination. In this paper, an IP Traceback method based on efficient Bloom filter data-structure and Netfilter open-source framework is proposed in which outperforms previous methods in terms of speed, memory usage, memory and processing overhead.