A novel improved compositive DDoS defence system

Author

Qin, Linlin ; Zhang, Yong-ping ; CHang, Qing

Author_Institution

Sch. of Comput. Sci. & Technol., China Univ. of Min. & Technol., Xuzhou, China

Volume

3

fYear

2010

Abstract

Based on the Probabilistic Packet Marking Scheme, a new Authenticated Packet Marking Scheme for IP trace-back is proposed. The novel scheme adopts a new dynamic probability value sequence to mark packets. Compared with PPM Scheme, the new scheme doesn´t need the topology of network and it improves a lot on false positive, computational complexity and astringency. Meanwhile, propose one kind of DDoS attack defending solution which combines the source-end defense system with the improved scheme of packet marking that could both detect DDoS attack and track the source of attacks.

Keywords

Internet; computer network security; IP traceback; authenticated packet marking scheme; compositive DDoS defence system; computational complexity; dynamic probability value sequence; false positive; probabilistic packet marking scheme; Computational complexity; Computer crime; IP networks; Internet; Probabilistic logic; Signal processing; Signal processing algorithms; Distributed Denial of Service (DDoS); IP trace-back; Probabilistic Packet Marking(PPM); Source-end detection;

fLanguage

English

Publisher

ieee

Conference_Titel

Signal Processing Systems (ICSPS), 2010 2nd International Conference on

Conference_Location

Dalian

Print_ISBN

978-1-4244-6892-8

Electronic_ISBN

978-1-4244-6893-5

Type

conf

DOI

10.1109/ICSPS.2010.5555719

Filename

5555719