A Packet Marking Algorithm Based on the Path Identification of Autonomous System

This paper proposes a new packet marking algorithm which is based on the path identification of autonomous system (AS). The algorithm mainly marks the packets with AS numbers through border gateway protocol (BGP) routers. According to the marked information in the packets, victims can not only reconstruct the AS path that the attack packets have passed by and trace the attack source to the original AS, but also can filter the packets which have the attack path, hence making it possible to alleviate the impact caused by attack traffic on the victims. It solves the disadvantages of the traditional packet marking methods with heavy computational overhead and high false positive. At the same time, it doesn´t need all the routers´ participation in marking in the attack path, which greatly reduces the overhead of routers.