TY - GEN
T1 - A Table-driven approach for IP traceback based on network statistic analysis
AU - Su, Wei Tsung
AU - Chuang, Yi Hsun
AU - Wu, Zong Bing
AU - Kuo, Yau Hwang
PY - 2009/7/10
Y1 - 2009/7/10
N2 - IP-spoofed DDoS attack is a serious security problem in Internet. Thus, an IP traceback approach is essential. In this paper, a fast IP traceback approach (FTA) based on network statistic analysis is proposed. By maintaining the Branch Label Table (BLT) which contains some network statistics in edge routers, the time of IP traceback procedure is efficiently reduced. In addition, an adaptive packet filter is proposed to mitigate the DDoS attacks. The packet drop rate adapts to the location of DDoS attackers and the queue length. Finally, ns-2 simulation is conducted to evaluate FTA. The simulation results show FTA substantially accelerates IP traceback procedure. Moreover, the proposed adaptive packet filter efficiently mitigates the DDoS attacks.
AB - IP-spoofed DDoS attack is a serious security problem in Internet. Thus, an IP traceback approach is essential. In this paper, a fast IP traceback approach (FTA) based on network statistic analysis is proposed. By maintaining the Branch Label Table (BLT) which contains some network statistics in edge routers, the time of IP traceback procedure is efficiently reduced. In addition, an adaptive packet filter is proposed to mitigate the DDoS attacks. The packet drop rate adapts to the location of DDoS attackers and the queue length. Finally, ns-2 simulation is conducted to evaluate FTA. The simulation results show FTA substantially accelerates IP traceback procedure. Moreover, the proposed adaptive packet filter efficiently mitigates the DDoS attacks.
UR - http://www.scopus.com/inward/record.url?scp=67649873457&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=67649873457&partnerID=8YFLogxK
M3 - Conference contribution
AN - SCOPUS:67649873457
SN - 9788955191387
T3 - International Conference on Advanced Communication Technology, ICACT
SP - 1633
EP - 1637
BT - 11th International Conference on Advanced Communication Technology, ICACT 2009 - Proceedings
T2 - 11th International Conference on Advanced Communication Technology, ICACT 2009
Y2 - 15 February 2009 through 18 February 2009
ER -