Enhanced probabilistic packet marking for IP traceback

Gao Zhiqiang; Nirwan Ansari

doi:10.1109/GLOCOM.2005.1577935

Enhanced probabilistic packet marking for IP traceback

Gao Zhiqiang, Nirwan Ansari

Electrical and Computer Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

10 Scopus citations

Abstract

A novel mechanism based on Probabilistic Packet Marking (PPM) for IP traceback is presented. Our proposal enhances the performance of PPM in the following aspects. First, PPM can effectively trace Denial of Service (DoS) attacks and small-scale Distributed DoS (DDoS) attacks only while our proposal may also be used to tackle large-scale DDoS attacks. Second, our scheme eliminates a serious vulnerability of PPM, i.e., spoofed marking inscribed by the attacker intentionally. Third, by optimizing the marking probability and refining the marking mechanism, our scheme can significantly reduce the number of packets required for path reconstruction. In comparison with PPM, as many as 41.31% of marked packets required for a single path reconstruction may be reduced using our scheme.

Original language	English (US)
Title of host publication	GLOBECOM'05
Subtitle of host publication	IEEE Global Telecommunications Conference, 2005
Pages	1676-1680
Number of pages	5
DOIs	https://doi.org/10.1109/GLOCOM.2005.1577935
State	Published - 2005
Event	GLOBECOM'05: IEEE Global Telecommunications Conference, 2005 - St. Louis, MO, United States Duration: Nov 28 2005 → Dec 2 2005

Publication series

Name	GLOBECOM - IEEE Global Telecommunications Conference
Volume	3

Other

Other	GLOBECOM'05: IEEE Global Telecommunications Conference, 2005
Country/Territory	United States
City	St. Louis, MO
Period	11/28/05 → 12/2/05

All Science Journal Classification (ASJC) codes

General Engineering

Access to Document

10.1109/GLOCOM.2005.1577935

Cite this

@inproceedings{94511aa4dfef42d9a521b5d782b8faae,

title = "Enhanced probabilistic packet marking for IP traceback",

abstract = "A novel mechanism based on Probabilistic Packet Marking (PPM) for IP traceback is presented. Our proposal enhances the performance of PPM in the following aspects. First, PPM can effectively trace Denial of Service (DoS) attacks and small-scale Distributed DoS (DDoS) attacks only while our proposal may also be used to tackle large-scale DDoS attacks. Second, our scheme eliminates a serious vulnerability of PPM, i.e., spoofed marking inscribed by the attacker intentionally. Third, by optimizing the marking probability and refining the marking mechanism, our scheme can significantly reduce the number of packets required for path reconstruction. In comparison with PPM, as many as 41.31% of marked packets required for a single path reconstruction may be reduced using our scheme.",

author = "Gao Zhiqiang and Nirwan Ansari",

year = "2005",

doi = "10.1109/GLOCOM.2005.1577935",

language = "English (US)",

isbn = "0780394143",

series = "GLOBECOM - IEEE Global Telecommunications Conference",

pages = "1676--1680",

booktitle = "GLOBECOM'05",

note = "GLOBECOM'05: IEEE Global Telecommunications Conference, 2005 ; Conference date: 28-11-2005 Through 02-12-2005",

}

Zhiqiang, G & Ansari, N 2005, Enhanced probabilistic packet marking for IP traceback. in GLOBECOM'05: IEEE Global Telecommunications Conference, 2005., 1577935, GLOBECOM - IEEE Global Telecommunications Conference, vol. 3, pp. 1676-1680, GLOBECOM'05: IEEE Global Telecommunications Conference, 2005, St. Louis, MO, United States, 11/28/05. https://doi.org/10.1109/GLOCOM.2005.1577935

TY - GEN

T1 - Enhanced probabilistic packet marking for IP traceback

AU - Zhiqiang, Gao

AU - Ansari, Nirwan

PY - 2005

Y1 - 2005

N2 - A novel mechanism based on Probabilistic Packet Marking (PPM) for IP traceback is presented. Our proposal enhances the performance of PPM in the following aspects. First, PPM can effectively trace Denial of Service (DoS) attacks and small-scale Distributed DoS (DDoS) attacks only while our proposal may also be used to tackle large-scale DDoS attacks. Second, our scheme eliminates a serious vulnerability of PPM, i.e., spoofed marking inscribed by the attacker intentionally. Third, by optimizing the marking probability and refining the marking mechanism, our scheme can significantly reduce the number of packets required for path reconstruction. In comparison with PPM, as many as 41.31% of marked packets required for a single path reconstruction may be reduced using our scheme.

AB - A novel mechanism based on Probabilistic Packet Marking (PPM) for IP traceback is presented. Our proposal enhances the performance of PPM in the following aspects. First, PPM can effectively trace Denial of Service (DoS) attacks and small-scale Distributed DoS (DDoS) attacks only while our proposal may also be used to tackle large-scale DDoS attacks. Second, our scheme eliminates a serious vulnerability of PPM, i.e., spoofed marking inscribed by the attacker intentionally. Third, by optimizing the marking probability and refining the marking mechanism, our scheme can significantly reduce the number of packets required for path reconstruction. In comparison with PPM, as many as 41.31% of marked packets required for a single path reconstruction may be reduced using our scheme.

UR - http://www.scopus.com/inward/record.url?scp=33846647475&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=33846647475&partnerID=8YFLogxK

U2 - 10.1109/GLOCOM.2005.1577935

DO - 10.1109/GLOCOM.2005.1577935

M3 - Conference contribution

AN - SCOPUS:33846647475

SN - 0780394143

SN - 9780780394148

T3 - GLOBECOM - IEEE Global Telecommunications Conference

SP - 1676

EP - 1680

BT - GLOBECOM'05

T2 - GLOBECOM'05: IEEE Global Telecommunications Conference, 2005

Y2 - 28 November 2005 through 2 December 2005

ER -

Enhanced probabilistic packet marking for IP traceback

Abstract

Publication series

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this