| Presentation | 2006-02-17 Methods for Improving Performance on Packet Marking by Reducing Marking Duplicates Hiroomi ISOZAKI, Shingo ATA, Ikuo OKA, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | Probabilistic Packet Marking (PPM) is one of the methods on IP traceback. In this method, intermediate router embeds (i.e., marks) the address of itself into the header of the sampled packet. However, because the PPM does not have a mechanism to avoid overrides of marking information, there is a problem that it needs a lot of packets to reconstruct attack route. We previously proposed two marking schmes based on the history of marking. They can reconstruct the attack route with fewer packets than the original PPM, however, they still require some parameter tunings for obtaining the optimal performance. In this paper we analyze factors which cause override of marking information, and propose a new packet marking scheme to minimize the impact of packet overrides. Through simulation results, we show that our proposed method can reduce the required number of packets significantly to reconstruct the attack route without tuning of parameters compared with the original and history-based PPMs. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Distributed Denial of Service (DDoS) / Probabilistic Packet Marking (PPM) / IP Traceback / Marking Duplicates / Parameter Tuning |
| Paper # | IN2005-151 |
| Date of Issue |
| Conference Information | |
| Committee | IN |
|---|---|
| Conference Date | 2006/2/9(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | |
| Chair | |
| Vice Chair | |
| Secretary | |
| Assistant | |
| Paper Information | |
| Registration To | Information Networks (IN) |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | Methods for Improving Performance on Packet Marking by Reducing Marking Duplicates |
| Sub Title (in English) | |
| Keyword(1) | Distributed Denial of Service (DDoS) |
| Keyword(2) | Probabilistic Packet Marking (PPM) |
| Keyword(3) | IP Traceback |
| Keyword(4) | Marking Duplicates |
| Keyword(5) | Parameter Tuning |
| 1st Author's Name | Hiroomi ISOZAKI |
| 1st Author's Affiliation | Graduate School of Engineering, Osaka City University() |
| 2nd Author's Name | Shingo ATA |
| 2nd Author's Affiliation | Graduate School of Engineering, Osaka City University |
| 3rd Author's Name | Ikuo OKA |
| 3rd Author's Affiliation | Graduate School of Engineering, Osaka City University |
| Date | 2006-02-17 |
| Paper # | IN2005-151 |
| Volume (vol) | vol.105 |
| Number (no) | 602 |
| Page | pp.pp.- |
| #Pages | 6 |
| Date of Issue | |