Enhanced Single Packet IP Traceback Based on Bloom Filter

• Main Authors: Tzu-Chien Hsu, 許子謙
• Other Authors: Ming-Hour Yang
• Format: Others
• Language: zh-TW
• Published: 2016
• Online Access: http://ndltd.ncl.edu.tw/handle/18851174692757716846

碩士 === 中原大學 === 資訊工程研究所 === 104 === The Internet technology has been widely applied in many areas in the past decades and therefore its security issues have also attracted more and more concern. An attacker can hide their IP address to attack the victim, and it’s hard to find their true location. There are already many researchs addressing this issue, packet marking mechanism need to collect a large number of attack packets to find the attacker. Packet logging mechanism can trace back to the attacker by a single packet, but it will consume a lot of storage space on the router. Hybrid IP traceback mechanism combines packet marking mechanism and packet logging mechanism, only need a single packet to find the attacker , and reduces the consumption of storage space on the router. Our approach is packet marking mechanism, using Bloom Filter to record the attack path, so that the packet marking mechanism can achieve a single packet tracing, and does not require the use of storage space on the router. We also use TTL field of the packet header to improve the drawback of Bloom Filter to further reduce the false positives rate.