Improving IP traceback algorithm based on AMS
Hailei Wang, Linli Zhou · 2011
Advanced Marking Scheme (AMS) is a practical and effective method for IP trackback of the Distributed Denial of Service (DDoS) attack. However, AMS algorithm is based on the traditional method completely covered by the conditions, in reality, be difficult to achieve. This article presents an improved programmer, which according to counting distance by TTL value and identifying intermittent marking strategies to ensure correctness of the distance information and the order of reconstruction sequence under the conditions of non-full complete coverage. The experiments show that the improved algorithm reduces false positives and improves the efficiency of reconstruction.