Selective record route DoS traceback

Denial of service (DoS) is a significant security threat in open networks such as the Internet. IP traceback is one important tool proposed as part of DoS mitigation. Many techniques have been proposed to traceback the attacker locally, within a single domain. Fewer techniques have been proposed to traceback the origin of attack through a number of autonomous systems (AS). Here a technique that selectively performs traceback utilizing the IP record route feature is proposed. This selective record route traceback involves a limited number of routers on the whole path, namely the first autonomous system border router and the initial ingress router. The technique also includes an additional procedure that detects malicious marking from compromised routers and the point of origination.