Toward global Internet services to defend against DDoS by dynamic possibility-based packets marking trace back

DDoS is harmful to the Internet services for its attacking results, such as the service discontinuity, degradation of the quality of service and traffics aggregation. In this paper we give a dynamic possibility-based packet marking scheme for the IP trace back. In this scheme, packets are marked with the different address information, such as AS number or IP address, and together, with the different possibility according to the traffics loads in the router, which does not result in much performance cost. This scheme can help to the attacking path reconstruction, which helps to the traffics filter, traffics analysis, defense of aggregation and network forensics.