A IP Traceback Scheme for Direct Broadcast-based DRDoS Attack
Jia Zhang · Journal of Chinese Computer Systems · 2014
This paper presents a high performance and secure IP Traceback method named ROPMS( Verifiable Probabilistic Marking Scheme) for large scale DDoS(Distributed Denial of Service). Taking advantage of algebraic coding theory and Probabilistic Packet Marking method(PPM),ROPMS marks the edges and nodes of the attacking topology simultaneously. To restore the attacking path precisely,we cross verify those two markers. ROPMS outperforms existing IP Traceback methods in applicability,anti-interference and security. Furthermore,Our method can successfully reconstruct the attacking topology without any information of the ISP network topology. Our simulation experiments demonstrate that our method outperforms the method of Chen et al. in convergence and the accuracy of the full path restoring and our method can defend the large scale DRDoS.