New fragment marking algorithm for IP traceback
Liu Li · Computer Engineering and Applications Journal · 2010
IP traceback is an important measure to defend against Denial of Service(DoS) attack.Based on Compressed Edge Fragment Sampling algorithm(CEFS) for IP traceback,a new fragment marking algorithm(NFMS) is proposed.By enlarging marking space and using adaptive probability for packet marking,the NFMS algorithm reduces the number of packets needed for path reconstruction.Moreover,the algorithm reduces computation and false positive number in reconstructing multiple path by labeling fragment.Then the algorithm strengthens the anti-interference capability by initializing marking space of packets which are not marked by Border Router.Finally the algorithm deposits node fragment and edge fragment separately,which can confirm the accuracy of the obtained node in attack path.Compared with other algorithms,the NFMS algorithm has better performance in the aspect of the number of packets needed for attack path reconstruction.