Increasing Accuracy and Reliability of IP Traceback for DDoS Attack Using Completion Condition

Probabilistic Packet Marking (PPM) is one of the most promising schemes for performing IP Trace back. PPM reconstructs the attack graph in order to trace back to the attackers. Finding the Completion Condition Number (i.e. precise number of packets required to complete the trace back) is very important. Without a proper completion-condition, they might reconstruct a wrong attack-graph and attackers can evade detection. One presently being used works only for a single attacker based DoS attack and has an accuracy of just around 70%.

Provided by: International Journal of Network Security Topic: Security Date Added: Jul 2015 Format: PDF

Find By Topic