Research Article
Flexible Deterministic Router and Interface Marking for IP Traceback
|
International Journal of Computer Applications
Foundation of Computer Science (FCS), NY, USA
|
| Volume 64 - Issue 4 |
| Published: February 2013 |
| Authors: Varsha Mittal, Emmanuel S. Pilli, R. C. Joshi And |
10.5120/10619-2143
|
Varsha Mittal, Emmanuel S. Pilli, R. C. Joshi And . Flexible Deterministic Router and Interface Marking for IP Traceback. International Journal of Computer Applications. 64, 4 (February 2013), 1-6. DOI=10.5120/10619-2143
@article{ 10.5120/10619-2143,
author = { Varsha Mittal,Emmanuel S. Pilli,R. C. Joshi And },
title = { Flexible Deterministic Router and Interface Marking for IP Traceback },
journal = { International Journal of Computer Applications },
year = { 2013 },
volume = { 64 },
number = { 4 },
pages = { 1-6 },
doi = { 10.5120/10619-2143 },
publisher = { Foundation of Computer Science (FCS), NY, USA }
}
%0 Journal Article
%D 2013
%A Varsha Mittal
%A Emmanuel S. Pilli
%A R. C. Joshi And
%T Flexible Deterministic Router and Interface Marking for IP Traceback%T
%J International Journal of Computer Applications
%V 64
%N 4
%P 1-6
%R 10.5120/10619-2143
%I Foundation of Computer Science (FCS), NY, USA
Abstract
IP traceback involves identifying the actual source of a packet across the Internet. By identifying the real source address in packets, network security system can smartly protect the victim hosts and mitigate the attacks. Packet marking is the most important method of source identification using IP traceback and there are many variations. In this paper, we propose a modification to our previous capable IP traceback scheme, Deterministic Router and Interface Marking (DRIM), to handle fragmented traffic as well. The modification introduces nominal additional bandwidth overhead, with no additional memory requirements and processing overhead on the DRIM-enabled interface and also reduces the problem of false positives. The proposed technique is compared with similar traceback techniques against various performance metrics and is found to be efficient.
References
- Belenky, A. and Ansari, N. 2003. On IP traceback. IEEE Communications Magazine, 41 (7). 142-153.
- Belenky, A. and Ansari, N. 2003. Accommodating fragmentation in deterministic packet marking for IP traceback. in IEEE Global Telecommunications Conference (GLOBECOM '03), (San Francisco, California, USA). 1374-1378.
- Savage, S. , Wetherall, D. , Karlin, A. and Anderson, T. 2001. Network support for IP traceback. IEEE/ACM Transactions on Networking, 9 (3). 226-237.
- Shannon, C. , Moore, D. and Claffy, K. C. 2002. Beyond folklore: observations on fragmented traffic. IEEE/ACM Transactions on Networking (TON), 10 (6). 709-720.
- Pilli, E. S. , Joshi, R. C. and Niyogi, R. 2011. Router and Interface Marking for Network Forensics. in Advances in Digital Forensics VII, (Florida, USA). 209-220.
- Belenky, A. and Ansari, N. 2003. IP traceback with deterministic packet marking. IEEE Communications Letters, 7 (4). 162-164.
- Belenky, A. and Ansari, N. 2007. On deterministic packet marking. Computer Networks, 51 (10). 2677–2700.
- Rayanchu, S. and Barua, G. 2005. Tracing attackers with deterministic edge router marking (DERM). in First International Conference on Distributed Computing and Internet Technology (ICDCIT '04), (Bhubaneswar, India). 400-409.
- Lin, I. and Lee, T. H. 2006. Robust and scalable deterministic packet marking scheme for IP traceback. in IEEE Global Telecommunications Conf. (GLOBECOM '06), (San Francisco, California, USA). 1-6.
- Jin, G. and Yang, J. 2006. Deterministic packet marking based on redundant decomposition for IP traceback. IEEE Communications Letters, 10 (3). 204-206.
- Xiang, Y. , Zhou, W. and Guo, M. 2009. Flexible deterministic packet marking: an IP traceback system to find the real source of attacks. IEEE Transactions on Parallel and Distributed Systems, 20 (4). 567-580.
- Chen, R. , Park, J. M. and Marchany, R. 2006. RIM: Router Interface Marking for IP Traceback. in IEEE Global Telecommunications Conference (GLOBECOM '06), (San Francisco, California, USA). 1-5.
- Yi, S. , Xinyu, Y. , Ning, L. and Yong, Q. 2006. Deterministic packet marking with link signatures for IP traceback. in Second SKLOIS Conference on Information Security and Cryptology (Inscrypt '06), (Beijing, China). Springer. 144-152.
- Peng, D. , Shi, Z. , Tao, L. and Ma, W. 2007. "Enhanced and authenticated deterministic packet marking for IP traceback," in 7th International Conference on Advanced Parallel Processing Technologies (APPT 2007), (Guangzhou, China), Springer-Verlag, 2007, 508-517.
Index Terms
Keywords