Research on authentication scheme for DDoS attack source traceback
Chen Song-qiao · Jisuanji yingyong yanjiu · 2007
This paper presented a common marking scheme for large scale DDoS attack source traceback based on PPM.Compared to other schemes,this scheme could be applied to direct and reflected DDoS attack source traceback by using reflection relay algorithm.Furthermore,this scheme encoded the router's IP using techniques from algebraic coding theory,encoded and authenticated the edge information with HMAC method whose secret key was updated periodically,and could decode the information and reconstruct the attack paths effectively,even without the ISP's router map.Through an analysis,this scheme is robust and compatible with IPv4 protocol.