On the (in)effectiveness of probabilistic marking for IP traceback under DDoS attacks

  • Vamsi Paruchuri
  • , Arjan Durresi
  • , Raj Jain

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

5 Scopus citations

Abstract

Distributed denial-of-service attacks (DDoS) pose an immense threat to the Internet. The most studied solution is to let routers probabilistically mark packets with partial path information during packet forwarding, which is referred as Probabilistic Packet Marking (PPM). In this paper, we study the effect of simple attacker strategies to spoof the markings to impede victim's capacity to traceback. We show that random marking is sufficient to impede the victim from tracing the attackers. A simple enhancement based on IP path length distribution makes it harder for the victim. We hope that this analysis would help researchers to adapt the current PPM techniques accordingly to thwart the DDoS attacks.

Original languageEnglish
Title of host publicationIEEE GLOBECOM 2007 - 2007 IEEE Global Telecommunications Conference, Proceedings
Pages1965-1970
Number of pages6
DOIs
StatePublished - 2007
Event50th Annual IEEE Global Telecommunications Conference, GLOBECOM 2007 - Washington, DC, United States
Duration: Nov 26 2007Nov 30 2007

Publication series

NameGLOBECOM - IEEE Global Telecommunications Conference

Conference

Conference50th Annual IEEE Global Telecommunications Conference, GLOBECOM 2007
Country/TerritoryUnited States
CityWashington, DC
Period11/26/0711/30/07

Keywords

  • IP traceback
  • Network security
  • Probabilistic marking

Fingerprint

Dive into the research topics of 'On the (in)effectiveness of probabilistic marking for IP traceback under DDoS attacks'. Together they form a unique fingerprint.

Cite this