QuIT: Quantitative IP Traceback

Traceback is the technique to trace packets back to the sources or the routers near the sources, which is essential while defending against IP spoofing and denial of service attacks. In this paper we present the design of QuIT (Quantitative IP traceback) system which can trace the origin of a single packet and figure out the distribution of packets from each source. QuIT generates audit trails for packets and transfers them along with the traffic to provide the ability of audit for the downstream victims. The traceback can be operated locally near the victim without communicating with other routers or ISPs, which increases the feasibility of deployment. Theoretic analysis and simulation experiments demonstrated that the traffic increased by the QuIT system is less than 0.12% and computation complexity is affordable.