Towards Stateless Single-Packet IP Traceback - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2007

Towards Stateless Single-Packet IP Traceback

Rafael Pinaud Laufer
  • Fonction : Auteur
Pedro Braconnot-Velloso
Daniel de Oliveira Cunha
  • Fonction : Auteur
  • PersonId : 967517
Igor Monteiro Moraes
  • Fonction : Auteur
Marco Bicudo
  • Fonction : Auteur
Marcelo Moreira
  • Fonction : Auteur

Résumé

The current Internet architecture allows malicious nodes to disguise their origin during denial-of-service attacks with IP spoofing. A well-known solution to identify these nodes is IP traceback. In this paper, we introduce and analyze a lightweight single-packet IP traceback system that does not store any data in the network core. The proposed system relies on a novel data structure called Generalized Bloom Filter, which is tamper resistant. In addition, an efficient improved path reconstruction procedure is introduced and evaluated. Analytical and simulation results are presented to show the effectiveness of the proposed scheme. The simulations are performed in an Internet-based scenario and the results show that the proposed system locates the real attack path with high accuracy.

Dates et versions

hal-01334819 , version 1 (21-06-2016)

Identifiants

Citer

Rafael Pinaud Laufer, Pedro Braconnot-Velloso, Daniel de Oliveira Cunha, Igor Monteiro Moraes, Marco Bicudo, et al.. Towards Stateless Single-Packet IP Traceback. Local Computer Networks, 2007. LCN 2007. 32nd IEEE Conference on, Oct 2007, Dublin, Ireland. pp.548-555, ⟨10.1109/LCN.2007.15⟩. ⟨hal-01334819⟩
61 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More