A hybrid scheme using packet marking and logging for IP traceback. (12th April 2010)

• Record Type: Journal Article
• Authors: Malliga, S.; Tamilarasi, A.
• Is Part Of: International journal of internet protocol technology. Volume 5:Number 1/2(2010)
• Page Start: 81
• Page End: 91
• Publication Date: 2010-04-12
• Subjects: IP traceback -- packet marking -- packet logging -- packet storage overhead -- traceback overhead -- traceback accuracy -- internet protocol -- attack path -- network attacks -- network security -- simulation; File Transfer Protocol (Computer network protocol) -- Periodicals; Multicasting (Computer networks) -- Periodicals; 004.678
• Languages: English
• ISSNs: 1743-8209

Abstract

IP traceback is a mechanism for tracing IP packets back to their sources. Tracing mechanisms include packet marking and logging. Log based traceback has the ability to backtrack a single packet by logging each packet at intermediate nodes in the networks. Marking based traceback helps to embed the path information of the intermediate nodes in the packets and the embedded information is used by a victim to reconstruct the attack path. Recent researches show that the performance of hybrid methods comprising logging and marking are appreciable as they help to traceback a single attack packet with less storage overhead on routers. In this study, we use a hybrid approach based on marking and logging to traceback single attack packet with less storage and traceback overhead on routers. We show this through a mathematical analysis. We also evaluate the traceback accuracy of our system and other hybrid approaches. Additionally, the simulation results are also presented to verify the effectiveness of the proposed system.