IP Traceback

Content Leader: Jess Garcia - Last Updated: January 22, 2007

Automated Mechanisms

• Packet Marking
  • Probabilistic Packet Marking
    • From On the Effectiveness of Probabilistic Packet Marking for IP Traceback under Denial of Service Attack:
      "For singlesource attacks Probabilistic Packet Marking is effective at localizing the attack origin. In a distributed DoS attack, however, as the number of attack sources mounted increases, traceback is rendered more difficult."
  • Deterministic packet marking
• Hash Based Marking at router
• Out-of-band approaches
• Trace-back of active attack flows
• Source Path Isolation Engine (SPIE)
  • Refs:
    • SPIE-IPv6: Single IPv6 Packet Traceback

References

• Wikipedia: IP traceback