Directed geographical traceback

Abstract

In this paper, a new mechanism for IP traceback based on the geographic information rather than the traditional IP address information is proposed. The proposed solution possesses several desirable features such as fast convergence (the attack source can be identified with a single packet), lightweight (imposing little computational overhead on routers), and improved robustness. In addition, a service provider can implement this scheme without revealing its internal network topology. Furthermore, the new marking scheme allows the victim to defend against DDoS attacks without counting on its ISP, which is an important improvement.