An Algebraic Marking Scheme for Single-Packet IP Traceback

• Main Authors: Li-Yuan Chang, 張力元
• Other Authors: 謝續平
• Format: Others
• Language: zh-TW
• Published: 2003
• Online Access: http://ndltd.ncl.edu.tw/handle/34333109918510449244

碩士 === 國立交通大學 === 資訊工程系 === 91 === Along with the development of Internet applications, many network security issues become highlights. Attackers often damage computer systems via security vulnerabilities with the source IP address spoofing techniques. Recently, the traceback schemes are targeted for tracing and locating the real source of the attacks. Traceback techniques are divided into two categories: one constructs the attack path of DoS or DDoS by numerous packets received; the other does the same job by only one packet. In this thesis, an algebraic marking scheme for single-packet IP traceback is proposed to precisely identify the source of the attack. The marked value that calculated by routers is according to the incoming link number of each router. Consequently, the attack path can sequentially be constructed with the information of Internet topology. In this way, our scheme does not require extra memory in routers to support the operation for traceback. The victim can always successfully construct the attack path without any time constrain. Furthermore, proposed scheme resists from mark spoofing and replay attacks that are commonly used to mislead existing traceback mechanisms.