Trace IP Packets by Flexible Deterministic Packet Marking (FDPM)

2004 IEEE Workshop on IP Operations and Management Proceedings, IPOM 2004: Self-Measurement and Self-Management of IP Networks and Services

Volumn , Issue , 2005, Pages 246-252

  Xiang, Yang ^a   Zhou, Wanlei ^a  

^a DEAKIN UNIVERSITY   (Australia)

Author keywords

DDoS; Flexible Deterministic Packet Marking; Hash function; IP traceback; Security

Indexed keywords

COMPUTATIONAL METHODS; FUNCTIONS; INTERNET; PROBABILITY; SECURITY OF DATA;

DDOS; FLEXIBLE DETERMINISTIC PACKET MARKING; HASH FUNCTION; IP TRACEBACK; SECURITY;

PACKET NETWORKS;

EID: 28844455665     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (26)

1. H. Aljifri, "IP Traceback: A New Denial-of-Service Deterrent?", IEEE Security & Privacy, Vol.1, No.3, 2003, pp.24-31.
2. T. Baba and S. Matsuda, "Tracing Network Attacks to Their Sources", IEEE Internet Computing, Vol.6, No.3, 2002, pp.20-26.
3. S. M. Bellovin, "ICMP Traceback Messages", Internet Draft, Network Working Group, 2000.
4. A. Belenky and N. Ansari, "Tracing Multiple Attackers with Deterministic Packet Marking (DPM)", Proc. of IEEE Pacific Rim Conference on Communications, Computers and Signal Processing, 2003.
5. A. Binstock and J. Rex, Practical Algorithms for Programmers, Pearson Education, 1995.
6. H. Burch and B. Cheswick, "Tracing Anonymous Packets to Their Approximate Source", Proc. of the 14th Systems Administration Conference (LISA 2000).
7. Computer Emergency Response Team, CERT, http://www.cert.org.
8. D. Dean, M. Franklin, and A. Stubblefield, "An Algebraic Approach to IP Traceback", Proc. of Network and Distributed System Security Symposium (NDSS 2001), pp.3-12.
9. N. G. Duffield and M. Grossglauser, "Trajectory sampling for direct traffic observation", ACM SIGCOMM 2000, pp.271-282.
10. B. W. Kernighan and Dennis M. Ritchie, The C Programming Language, Second Edition, Prentice Hall, 1988.
11. A. Mankin, D. Massey, C.-L. Wu, S. F. Wu and L. Zhang, "On Design and Evaluation of Intention-Driven ICMP Traceback", Proc. of Computer Communications and Networks, 2001.
12. K. Park and H. Lee, "On the Effectiveness of Probabilistic Packet Marking for IP Traceback under Denial of Service Attack", IEEE INFOCOM 2001, pp.338-347.
13. T. Peng, C. Leckie, and R. Kotagiri, "Adjusted Probabilistic Packet Marking for IP Traceback", Networking 2002.
14. RFC791, Internet Protocol, DARPA, 1981.
15. RFC 1349, Type of Service in the Internet Protocol Suite, Network Working Group, 1992.
16. RFC2460, Internet Protocol, Version 6 (IPv6) Specification, Network Working Group, 1998.
17. RFC2474, Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers, Network Working Group, 1998.
18. S. Savage, D. Wetherall, A. Karlin and T. Anderson, "Network Support for IP Traceback", ACM/IEEE Transactions on Networking, Vol.9, No.3, 2001,pp.226-237.
19. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, B. Schwarte, S. T. Kent, and W. T. Strayer, "Single-Packet IP Traceback", IEEE/ACM Transactions on Networking, December, 2002, pp.721-734.
20. D. Song and A. Perrig, "Advanced and Authenticated Marking Schemes for IP Traceback", IEEE INFOCOM 2001, pp.878-886.
21. [21 ] Scalable Simulation Framework, http://www.ssfhet.org.
22. I. Stocia and H. Zhang, "Providing Guaranteed Services Without Per Flow Management", ACM SIGCOMM99, 1999, pp. 81-94.
23. R. Stone, "CenterTrack: An IP Overlay Network for Tracking DoS Floods", 9th Usenix Security Symposium, 2000, pp. 199-212.
24. Y. Xiang, W. Zhou, and M. Chowdhury, "A Survey of Active and Passive Defence Mechanisms against DDoS Attacks", Technical Report, TR C04/02, School of Information Technology, Dealern University, Australia, March, 2004.
25. Y. Xiang, and W. Zhou, "An Active Distributed Defense System to Protect Web Applications from DDoS Attacks", Proc. of the 6th International Conference on Information Integration and Web Based Application & Services (iiWAS2004).
26. A. Yaar, A. Perrig, and D. Song, "Pi: A Path Identification Mechanism to Defend against DDoS Attacks", 2003 IEEE Symposium on Security and Privacy.