CoMM: Real-Time IP Traceback Model Based on Cooperative Marking and Mitigation
Jiubin Ju · Journal of Chinese Computer Systems · 2006
Real-time is very important to IP tracebacking hosts that send spoofed source address packets in DoS or DDoS attacks. We propose a real-time IP traceback model based on cooperative marking and mitigation. In this model, with the cooperation of autonomous network coordinator, the victim constructs attacking paths actively. Local results sent to the victim by coordinators can valid attacking paths. By rate limiting, routers can mitigate attack degree, which ensures legitimate traffic transmission and the traffic amount for the victim to construct attacking paths. This model can decrease router's overhead for tracebacking effectively.