Efficient dynamic probabilistic packet marking for IP traceback

Abstract

Recently, Denial-of-service @OS) attack bas become a pressing problem due to lack of efficient method to locate the real attackers and easy to execute with readily available soume codes on the Internet. lkaceback is a subtle scheme to tackle the DOS attacks. The probabilistic packet marking VPM) is a new way for practical IP traceback. Although the PPM enables a victim to pinpoint the attacker's origin to within 2. 5 equally possible sites, it have been shown that PPM suffers f" uncertainty noder attack with spoofed packets. In this work, we present a new approach, called dynamic probabilistic packet marking@PPM), to further improve effectiveness of PPM. Instead of using a fixed marking probability, we propose to deduce how far a packet has traveled and then choose the marking probability as an inverse function of hop count traveled. The DPPM may mmove uncertainty completely and enable victims to precisely pinpointattacking origin under DOS attacks. Our proposed DPPM can he applied to DDoS attacks with a very limited uncertainty.