Stable Topology Support for Tracing DDoS Attackers in MANET

Traceback technique is useful to identify the source of an attack. Several types of traceback schemes have been proposed for wired networks. But most of them are not suitable for mobile ad hoc networks (MANETs) due to limited resource and dynamically-changing topology. Among all of existing schemes, probabilistic packet marking (PPM) scheme might be the most promising scheme for MANET because it is more lightweight than others. However, it is difficult for PPM scheme to converge quickly in MANET, since it relies on the assumption of static topology that does not hold in MANET due to dynamic topology. In this paper, we propose a traceable overlay network with relative stable topology support for traceback based on identity replacement mechanism. We present the protocol design and experiments. The experiment results show that our approach can get a much more stable topology for traceback and better traceback performance in MANET.