Research on the Algorithm of Data Packet Marking for DDoS Attack
Deshan Zhao, Bin Cao · 2009
At present, data packet marking is a good approbatory technology of various schemes for dealing with DDoS attack. Probabilistic packet marking (PPM) is the most representative technology of data packet marking. This paper studies the algorithm of data packet marking in depth, especially for PPM. Research shows there is a serious problem that marking routing information is unfair in different place of the attack path. It will result in reconstructing the attack path needs large numbers of packets. In order to handle this problem, this paper proposes a new algorithm based on marked judging flag (MJF-PM). We set up a marked judging flag in MJF-PM which denotes whether a packet was marked or not. Thus, we can settle the problem of PPM. The result of theoretical analysis and simulated experiment shown, MJF-PM is much better than PPM, and it is feasible.