Autonomous System-Based Marking Scheme for Internet Traceback
Changlai Huang, Ming Li, Chuanshan Gao · 2009
IP traceback is a critical ability for identifying sources of attacks and instituting protection measures for the Internet. Like any countermeasures for DDoS attack, a well-designed scheme requires tracebacking system to react to spot it in real-time. This paper proposes a novel traceback scheme based on autonomous system (AS) marking. We break down the tracing procedure into intra-AS and inter-AS phases by embedding the marking information IP header with the AS number and ASpsilas border router ID. Compared with traditional schemes, the advantages of our approach include quick convergence, light computation overhead as well as without the leakage of sensitive information.