Traffic-based Optimized Marking Scheme for IP Traceback
Liu Feng-yu · 2008
Traditional IP traceback schemes can not trace the attacking sources quickly enough when facing large-scale DDoS attack.This paper presents an Optimized Marking Scheme(OMS) based on the characteristic of DDoS traffic distribution.This sheme inserts some controlling informaton into the marked packets' headers,which makes the sampling probability of such packets keep increasing along with the marking router's distance to the destination.Thus,the packets from farer routers where the DDoS traffic is lower can reach the destination with larger probability,which improves the speed of tracing.Simulation results show that OMS is much more efficient than other traditional schemes.