IP-traceback based attacker tracking: a probabilistic technique for detecting Internet attacks using the concept of hidden Markov models

In this paper we propose an extension to the probabilistic packet marking scheme, for detecting denial-of-service and distributed denial-of-service attacks, using the concept of hidden Markov models. Our approach has the potential of probabilistically reconstructing the attacking path from the available packets without the intervention of Internet service providers and without increasing the overhead on the packets.