An edge router-based fast internet traceback

Fast Internet Traceback (FIT) has been proposed as an advanced approach of probabilistic packet marking (PPM) for IP traceback. It performs well even in the presence of legacy routers, and scales to large distributed attacks with thousands of attackers. Moreover, victims can identify attack paths with high probability after receiving only tens of packets In this paper, we propose an edge router-based FIT (ERFIT), which needs less packets and has lower false positives than previous FIT. In addition, a service provider can implement it without revealing its internal network topology.