Using Probing Packets to Recover the Incomplete IP Traceback

Author

Tseng, Yu-Kuo ; Hsieh, Wen-Shyong ; Chou, Wen-Yen ; Yang, Kuan-Yen ; Tsia, Yu-Tsung ; Huang, Ming-Cheng

Author_Institution

Dept. of Comput. Sci. & Inf. Eng., Shu-Te Univ., Kaohsiung

fYear

2006

fDate

12-15 Dec. 2006

Firstpage

776

Lastpage

779

Abstract

An enhancement of probability packet marking (PPM) used to trace back the denial-of-service attacker is proposed. Through sending probing packets, the proposed scheme is used to recover missing attacking paths, resulting from successive non-PPM routers, which do not support PPM scheme along the attack path. Furthermore, according to the proposed scheme, the probing packet with IP record routing or loose source routing can detect consecutive non-PPM routers and help to recover lost paths because of non-PPM routers in a row. Especially, this scheme with the loosen source routing algorithm can record all traveled routers´ IP addresses into probing packet´s IP header

Keywords

IP networks; telecommunication network routing; telecommunication security; telecommunication services; IP addresses; IP header; IP record routing; denial-of-service attacker; incomplete IP traceback; loose source routing; missing attacking path recovery; non-PPM routers; probability packet marking; probing packets; Communication networks; Computer crime; Computer networks; Computer science; Forensics; Law enforcement; Protection; Routing; Signal processing; Tellurium;

fLanguage

English

Publisher

ieee

Conference_Titel

Intelligent Signal Processing and Communications, 2006. ISPACS '06. International Symposium on

Conference_Location

Yonago

Print_ISBN

0-7803-9732-0

Electronic_ISBN

0-7803-9733-9

Type

conf

DOI

10.1109/ISPACS.2006.364764

Filename

4212382