Towards Improving an Algebraic Marking Scheme for Tracing DDoS Attacks
Moon-Chuen Lee, Yejun He, Zhaole Chen · 2009
Distributed Denial of Service (DDoS) attacks could be considered as one of the most serious security problems to the Internet today. To locate the sources of the at-tack packets, we usually need to find the paths through which the attack packets traversed from the sources to the victim. In this paper, we identify the weaknesses of an existing algebraic marking scheme for tracing DDoS attacks, and propose an improved version of the mark-ing scheme. Simulation experiment results show that the proposed marking scheme could achieve a high success rate in tracing the attack sources. When compared with other marking schemes, it requires fewer packets for at-tack paths reconstruction. Further, it is characterized by generating no false positives, creating no additional traf-fic to the network, having a relatively low packet marking and attack path reconstruction overhead, and being back-ward compatible.