A systematic review of IP traceback schemes for denial of service attacks. Issue 56 (February 2016)

• Record Type: Journal Article
• Authors: Singh, Karanpreet; Singh, Paramvir; Kumar, Krishan
• Is Part Of: Computers & security. Issue 56(2016)
• Page Start: 111
• Page End: 139
• Publication Date: 2016-02
• Subjects: Distributed denial-of-service attacks -- IP traceback -- Packet marking -- Packet logging -- Systematic review; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2015.06.007
• Languages: English
• ISSNs: 0167-4048

Abstract

Highlights: Comprehensive categorization of the IP traceback schemes. In-depth evaluation of IP traceback approaches, classes and metrics. Exploration of research trends with the help of a systematic review protocol. Discussion on the mapping results of the systematic literature review. Summarization of issues, challenges and future research avenues. Abstract: Internet has always been vulnerable to a variety of security threats as it was originally designed without apprehending the prospect of security concerns. Modern era has seen diverse nature of attacks possible on the Internet, including the most perilous attack, Distributed Denial of Service (DDoS) attacks. In such an attack, a large number of compromised systems coordinate with each other so as to direct gigantic magnitude of attack traffic toward the victim, depleting its tangible and intangible network resources. To further exacerbate the situation, these compromised systems usually disguise their identity by capitalizing on IP address spoofing. IP traceback is the class of techniques used to identify the actual source of network packets. In this paper, we followed a systematic approach to comprehensively review and categorize 275 works representing existing IP traceback literature. The paper also provides an in-depth analysis of different IP traceback approaches, their functional classes and the evaluation metrics. Based on the literature review, we also answered a set of research questions to understand the current trends in IP traceback. Various issues, challenges and avenues for future research in the area of IP traceback are also discussed.