Packet Marking Scheme to Defend Against Spoofed IP DDoS Attack
Zhongwen Guo · Jisuanji gongcheng · 2008
A new packet marking scheme is proposed, in which a path identification that represents the route an IP packet has traversed is embedded in each IP packet. And a counter is set for each identification. It represents the number of different IP addresses that have the same identification. The onset of a spoofed DDoS attack can be detected by comparing the sum of the counters with a marginal value that has been set. Spoofed packet can be filtered so as to sustain the quality of protected Internet services. Experimental results show that the proposed scheme is efficient on identifying the spoofed DDoS attack packets.