DDoS traceback based on router traffic analysis
Ruchuan Wang · Journal of Jiangsu University · 2007
DDoS traceback approach based on router traffic analysis was proposed according to DDoS attack's traffic characteristic.After every access router sending traffic to victim was found out by input debugging process,access routers sending DDoS attack traffic are ascertained by traffic analysis.The DDoS attack traffic detection algorithm based on self-similarity was introduced,and a honeypots group platform was designed for traffic analysis and traceback.At last the capability of this traceback approach was analyzed.The result shows that the approach can trace back all the access routers sending DDoS attack traffic accurately.