DocumentCode :
3334354
Title :
FC-DERM: Fragmentation compatible deterministic edge router marking
Author :
Saurabh, Samant ; Sairam, Ashok Singh
Author_Institution :
Dept. of Comput. Sci., Indian Inst. of Technol., Patna, Patna, India
fYear :
2011
fDate :
2-5 Oct. 2011
Firstpage :
800
Lastpage :
805
Abstract :
Distributed Denial-of-Service (DDoS) attacks are one of the major threats the Internet is facing today. The problem of tracing the attackers is particularly difficult since attackers spoof the source addresses. Researchers all over the world have proposed several packet marking based techniques for DDoS attack mitigation using IP Traceback, however even after a decade of active research no commercial product incorporates any of these packet marking techniques; either because they add overhead in network traffic or they break some of the existing internet features like IP fragmentation. In this paper, we propose a novel scheme which performs IP Traceback but adds no space overhead and yet is fragmentation compatible. We show that our scheme produces negligible false positive and causes almost no collision in ID field for fragmentation and reassembly. As this scheme is simple to implement and has very less processing and storage overhead at the victim and routers, it makes it a suitable candidate for widespread acceptance in the internet community and industry for DDoS attack prevention and mitigation.
Keywords :
Internet; security of data; telecommunication network routing; telecommunication security; telecommunication traffic; DDoS attack mitigation; FC-DERM; IP fragmentation; IP traceback; Internet community; deterministic edge router marking; distributed denial-of-service; fragmentation compatible; network traffic; packet marking; Computer crime; Delay; IP networks; Indexes; Internet; Routing protocols; DDoS; DoS; Edge Routers; Fragmentation compatible IP Traceback and RTT; Hashing; Packet Marking;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Communications (APCC), 2011 17th Asia-Pacific Conference on
Conference_Location :
Sabah
Print_ISBN :
978-1-4577-0389-8
Type :
conf
DOI :
10.1109/APCC.2011.6152917
Filename :
6152917
Link To Document :
بازگشت