Research On IP Traceback

In recent years, there are more and more attacks aimed at network, especially the DDoS. These attacks affect the Internet, and can cause many serous safety problems on the Internet. It becomes an urgent problem to identify the actual source of the attacker's origin. It is very important to locate the attacker's origin rapidly and exactly, which can offer a positive reaction for defense, can provide gists for implead and can frighten the attackers.After discussing the IP traceback theories, implications and challenges associated, we present a new packet marking scheme, non-Repeated Varying-Probability Packet Marking scheme (nRVPPM). In the nRVPPM, the packets are marked only one time along the forwarding path, so nRVPPM solves the repeated marking problem. And routers mark a packet with the probability 1/(33-d) according to the distance d the packet has traveled, which makes the victim receive the packets marked by each router with equal probability. Then we make use of the comparability of the IP addresses in a path, propose another scheme, Compressed non-Repeated Varying-Probability Packet Marking (CnRVPPM), which takes an ulterior step in reducing the number of packets required for traceback. We evaluate the effectiveness of the proposed schemes through simulation studies. Our studies show that the proposed schemes offer high precision and efficiency, can dramatically reduce the number of packets that is required for the traceback process.