An IP Traceback Model Based Traffic Entropy Variations for DDoS Attacks
Gui Bingxiang, Kang Qu Zhou, Wanlei Zhou · Journal of Chinese Computer Systems · 2013
DDoS attacks are a critical threat to the Internet.In this paper,we present a new traceback mechanism for DDoS attacks that is based on entropy variations betw een normal and DDoS attack traffic,w hich is fundamentally different from commonly used packet marking techniques.In comparison to the existing DDoS traceback methods,the presented strategy possesses some advantagesit is memory nonintensive,efficiently scalable,robust against packet pollution,and independent of attack traffic patterns.Description and Analysis on DDoS attack traffic entropy variables based on the characteristics of the tracking mechanism modeling,then gives the corresponding DDoS attack detection and tracking IP backtracking algorithm.The results of extensive experimental and simulation studies demonstrate the effectiveness and efficiency of the this method.