An Efficient and Adaptive IP Traceback Scheme

IP trace back is considered to be one of the promising countermeasures against Distributed Denial of Service (DDoS) attacks. IP trace back protocols must be effective as well as simple enough to be efficiently executed. However, there is almost no such an IP trace back protocol. In this paper, we consider an IP trace back protocol proposed by Muthuprasanna and Manimaran [1] (STE scheme for short) and shall propose a new, efficient, and adaptive IP trace back scheme, which is partly based on STE. Simply speaking, our scheme is efficient since it adaptively changes marking probabilities decrease the number of marking bits. In this paper, we conduct theoretical and numerical analyses of our scheme in detail and show that our scheme is more efficient than STE in terms of marking bit length and the number of packets for attack path recovery. The result is also supported by simulations experiments.