Title :
Hardware support for a hash-based IP traceback
Author :
Sanchez, Luis A. ; Milliken, Walter C. ; Snoeren, Alex C. ; Tchakountio, Fabrice ; Jones, Christine E. ; Kent, Stephen T. ; Partridge, Craig ; Strayer, W. Timothy
Author_Institution :
BBN Technol., Cambridge, MA, USA
Abstract :
The Source Path Isolation Engine (SPIE) is a system capable of tracing a single IP packet to its point of origin or point of ingress into a network. SPIE supports tracing by scoring a few bits of unique information about each packet for a period of time as the packets traverse the network. Software implementations of SPIE can trace packets through networks comprised of slow-to-medium speed routers (up to OC-12), but higher-speed routers (OC-48 and faster) require hardware support. In this paper, we discuss these hardware design aspects of SPIE. Most of the hardware resides in a self-contained SPIE processing unit, which may be implemented in a line card form factor for insertion into the router itself or as a stand-alone unit that connects to the router through an external interface
Keywords :
cryptography; packet switching; special purpose computers; telecommunication computing; telecommunication network routing; telecommunication security; transport protocols; IP packet tracing; SPIE; Source Path Isolation Engine; external interface; hardware design aspects; hardware support; hash-based IP traceback; line card form factor; router speed; self-contained processing unit; stand-alone unit; Computer crime; Floods; Hardware; Internet; Isolation technology; Phase detection; Routing; Safety; Search engines; TCPIP;
Conference_Titel :
DARPA Information Survivability Conference & Exposition II, 2001. DISCEX '01. Proceedings
Conference_Location :
Anaheim, CA
Print_ISBN :
0-7695-1212-7
DOI :
10.1109/DISCEX.2001.932167
