Paper Details

This paper describes a technique for tracing anonymous packet flooding attacks in the Internet back towardstheir source. This work is motivated by the increased frequency and sophistication of denial-of-service attacks and by thedifficulty in tracing packets with incorrect, or ―spoofed‖, source addresses. In this paper we describe a general purposetraceback mechanism based on probabilistic packet marking in the network. Our approach allows a victim to identify thenetwork path(s) traversed by attack traffic without requiring interactive operational support from Internet ServiceProviders (ISPs). Moreover, this traceback can be performed ―post-mortem‖ – after an attack has completed. Wepresent an implementation of this technology that is incrementally deployable, (mostly) backwards compatible and canbe efficiently implemented using conventional technology.Techniques have been developed to determine the source of large packet flows, but, to date, no system has beenpresented to track individual packets in an efficient, scalable fashion. We present a hash-based technique for IPtraceback that generates audit trails for traffic within the network, and can trace the origin of a single IP packetdelivered by the network in the recent past. We demonstrate that the system is effective, space-efficient (requiringapproximately 0.5% of the link capacity per unit time in storage), and implementable in current or next-generationrouting hardware. We present both analytic and simulation results showing the system’s effectiveness

Shital G lungase, Poonam B ragmahale, Sadhana B chitte, Nikhil Karnik, Asst. Professor Sushma S. Shinde, “IP Traceback using Deterministic Packet Marking”, International Journal of Advance Engineering and Research Development (IJAERD), Vol. 4, Issue 5, pp. 982-988, May 2017.