A Fractional-Step DDoS Attack Source Traceback Algorithm Based on Autonomous System

This paper proposes a fractional-step algorithm based on autonomous system(AS) to trace distributed denial of service(DDoS) attack source by dividing the tracing process into two steps. In the first step, Deterministic Packet Marking based on AS(ASDPM) is adopted to determine the attack-originating AS. In the second step, non-repeated probabilistic packet marking(NRPPM) is used to identify the exact origin of the attacks in the specific AS. Compared with previous algorithms, the two-step traceback algorithm has the benefits of low bandwidth consumption, quick convergence speed, light computational overhead and low false positive, it can decrease the number of packets the path reconstruction needs, and increase the efficiency of path reconstruction, hence making it possible to trace the DDoS attack source on a real-time basis.