Mobile agent based real time IP traceback

Network forensics technology with active and real time response characteristics is a new approach that can be used for investigation of network attack such as denial of service (DoS) attack. Once a system is compromised, the forensics and investigation is often always done after the attacks whereby some useful instant evidence is lost. The adaptive capture without loss of potential sensitive traffic and real time investigation is required. IP traceback schemes can be used for tracing the source of attacks. We propose the use of mobile agents to perform real time IP Traceback.