Presentation 2005-03-04
Discrimination between attackers and legitimate users based on the arrival interval distribution of marked packet
Takahiro SOKAWA, Humitaka NAKAMURA, Yasushi WAKAHARA,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) One of the weak points of IP networks is the ease in IP spoofing and DDoS (Distributed Denial of service) attacks take advantage of this weakness. Most effective means to cope with DDoS attacks is considered to filter the attack packets at the routers closest to the attackers. Therefore it is important to establish an IP traceback technique to identify these routers. Probabilistic packet marking (PPM) is one of the most promising scheme for the traceback. However, this scheme cannnot judge whether the mark packets come from attackers or legitimate users. This problem may lead to filter the legitimate users's packets wrong. The purpose of this paper is to propose a method to discriminate between attackers and legitimate users. The effectiveness of the proposed method is demonstrated by some computer simulation results.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) DDoS Attacks / IP Traceback / Propabilistic Packet Marking scheme
Paper # NS2004-250,IN2004-250
Date of Issue

Conference Information
Committee NS
Conference Date 2005/2/25(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Network Systems(NS)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Discrimination between attackers and legitimate users based on the arrival interval distribution of marked packet
Sub Title (in English)
Keyword(1) DDoS Attacks
Keyword(2) IP Traceback
Keyword(3) Propabilistic Packet Marking scheme
1st Author's Name Takahiro SOKAWA
1st Author's Affiliation Graduate School of Frontier Sciences, The University of Tokyo()
2nd Author's Name Humitaka NAKAMURA
2nd Author's Affiliation Graduate School of Frontier Sciences, The University of Tokyo:Information Technology Center, The University of Tokyo
3rd Author's Name Yasushi WAKAHARA
3rd Author's Affiliation Graduate School of Frontier Sciences, The University of Tokyo:Information Technology Center, The University of Tokyo
Date 2005-03-04
Paper # NS2004-250,IN2004-250
Volume (vol) vol.104
Number (no) 690
Page pp.pp.-
#Pages 4
Date of Issue