International Journal of Network Security
Probabilistic Packet Marking (PPM) is one of the most promising schemes for performing IP Trace back. PPM reconstructs the attack graph in order to trace back to the attackers. Finding the Completion Condition Number (i.e. precise number of packets required to complete the trace back) is very important. Without a proper completion-condition, they might reconstruct a wrong attack-graph and attackers can evade detection. One presently being used works only for a single attacker based DoS attack and has an accuracy of just around 70%.