Title :
A novel improved compositive DDoS defence system
Author :
Qin, Linlin ; Zhang, Yong-ping ; CHang, Qing
Author_Institution :
Sch. of Comput. Sci. & Technol., China Univ. of Min. & Technol., Xuzhou, China
Abstract :
Based on the Probabilistic Packet Marking Scheme, a new Authenticated Packet Marking Scheme for IP trace-back is proposed. The novel scheme adopts a new dynamic probability value sequence to mark packets. Compared with PPM Scheme, the new scheme doesn´t need the topology of network and it improves a lot on false positive, computational complexity and astringency. Meanwhile, propose one kind of DDoS attack defending solution which combines the source-end defense system with the improved scheme of packet marking that could both detect DDoS attack and track the source of attacks.
Keywords :
Internet; computer network security; IP traceback; authenticated packet marking scheme; compositive DDoS defence system; computational complexity; dynamic probability value sequence; false positive; probabilistic packet marking scheme; Computational complexity; Computer crime; IP networks; Internet; Probabilistic logic; Signal processing; Signal processing algorithms; Distributed Denial of Service (DDoS); IP trace-back; Probabilistic Packet Marking(PPM); Source-end detection;
Conference_Titel :
Signal Processing Systems (ICSPS), 2010 2nd International Conference on
Conference_Location :
Dalian
Print_ISBN :
978-1-4244-6892-8
Electronic_ISBN :
978-1-4244-6893-5
DOI :
10.1109/ICSPS.2010.5555719
