Practical network support for IP traceback

DMCA

Practical network support for IP traceback (2000)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Stefan Savage , David Wetherall , Anna Karlin , Tom Anderson

Citations:

670 - 13 self

BibTeX

@INPROCEEDINGS{Savage00practicalnetwork,
    author = {Stefan Savage and David Wetherall and Anna Karlin and Tom Anderson},
    title = {Practical network support for IP traceback},
    booktitle = {},
    year = {2000},
    pages = {295--306}
}

OpenURL

Abstract

This paper describes a technique for tracing anonymous packet flooding attacks in the Internet back towards their source. This work is motivated by the increased frequency and sophistication of denial-of-service attacks and by the difficulty in tracing packets with incorrect, or “spoofed”, source addresses. In this paper we describe a general purpose traceback mechanism based on probabilistic packet marking in the network. Our approach allows a victim to identify the network path(s) traversed by attack traffic without requiring interactive operational support from Internet Service Providers (ISPs). Moreover, this traceback can be performed “post-mortem ” – after an attack has completed. We present an implementation of this technology that is incrementally deployable, (mostly) backwards compatible and can be efficiently implemented using conventional technology. 1.

Keyphrases

practical network support ip traceback internet service provider source address denial-of-service attack network path conventional technology anonymous packet probabilistic packet general purpose traceback mechanism interactive operational support increased frequency attack traffic

DMCA