Hardware support for a hash-based IP traceback

Author

Sanchez, Luis A. ; Milliken, Walter C. ; Snoeren, Alex C. ; Tchakountio, Fabrice ; Jones, Christine E. ; Kent, Stephen T. ; Partridge, Craig ; Strayer, W. Timothy

Author_Institution

BBN Technol., Cambridge, MA, USA

Volume

2

fYear

2001

fDate

2001

Firstpage

146

Abstract

The Source Path Isolation Engine (SPIE) is a system capable of tracing a single IP packet to its point of origin or point of ingress into a network. SPIE supports tracing by scoring a few bits of unique information about each packet for a period of time as the packets traverse the network. Software implementations of SPIE can trace packets through networks comprised of slow-to-medium speed routers (up to OC-12), but higher-speed routers (OC-48 and faster) require hardware support. In this paper, we discuss these hardware design aspects of SPIE. Most of the hardware resides in a self-contained SPIE processing unit, which may be implemented in a line card form factor for insertion into the router itself or as a stand-alone unit that connects to the router through an external interface

Keywords

cryptography; packet switching; special purpose computers; telecommunication computing; telecommunication network routing; telecommunication security; transport protocols; IP packet tracing; SPIE; Source Path Isolation Engine; external interface; hardware design aspects; hardware support; hash-based IP traceback; line card form factor; router speed; self-contained processing unit; stand-alone unit; Computer crime; Floods; Hardware; Internet; Isolation technology; Phase detection; Routing; Safety; Search engines; TCPIP;

fLanguage

English

Publisher

ieee

Conference_Titel

DARPA Information Survivability Conference & Exposition II, 2001. DISCEX '01. Proceedings

Conference_Location

Anaheim, CA

Print_ISBN

0-7695-1212-7

Type

conf

DOI

10.1109/DISCEX.2001.932167

Filename

932167