A novel vector edge sampling scheme for IP traceback against DDoS attacks
Jun Fang Wei, Kai Chen, Yifeng Lian, Yingxia Dai · 2010
A novel edge sampling scheme for IP traceback against DDoS attacks is presented, which is called router's vector edge sampling (RVES). It is simple for marking machines to be implemented. A packet will be probabilistically pre-marked and post-marked on traversed router's interfaces. This approach supports incremental deployment, which makes it effective for multi-path attack reconstruction and computation. Probability packet marking (PPM) and reconstruction algorithm based on RVES is also presented. We implemented prototypes and deployed them in the real Internet to make some experiments. The results show that our method is effective and efficient.