Performance for DDoS Traceback Based on IP Address Fragmentation
Deshan Yang · 2007
Distributed-Denial-of- Service(DDoS)attacks are growing threats to today's Internet.The paper introduces the techniques to trace back the origins of a DDoS attack based on IP address over- lapping fragment.At same time,it dis- cusses that IP address is segmented into overlapping fragments with Border Router Packet Marking.A method to reduce false positives is simultaneously proposed after the cause of false positives generated in address reconstruction is analysed.Finally, it prove that this technique is lower rates of false positive,less complex of during ad- dress reconstruction,less quantity of bor- der router required.