Article

Tracers placement for IP traceback against DDoS attacks

Authors:

Chun-Hsin Wang,

Chiu-Kuo Liang,

Ching-Hsien Hsu,

Yu-Guang ChenAuthors Info & Claims

IWCMC '06: Proceedings of the 2006 international conference on Wireless communications and mobile computing

Pages 355 - 360

https://doi.org/10.1145/1143549.1143620

Published: 03 July 2006 Publication History

Abstract

This paper explores the tracers deployment problem for IP traceback methods how many and where the tracers should be deployed in the network to be effective for locating the attack origins. The minimizing the number of tracers deployment problems depended on locating the attack origins are defined. The problem is proved to be NP-complete. A heuristic method which can guarantee that the distance between any attack origin and its first met tracer be within an assigned distance is proposed. The upper bound for the probability of an undetected attack node can be calculated in advance and used to evaluate the number of tracers needed for the proposed heuristic method. Extended simulations are performed to study the performance of the tracers deployment.

References

[1]

J. Mirkovic and P. Reiher, "A Taxonomy of DDoS Attack and DDoS Defense Mechanisms," ACM SIGCOMM Computer Communications Review(CCR), vol. 34, no. 2, April 2004, pp.39--54.

Digital Library

[2]

Rocky K. C. Chang, "Defending against Flooding-Based Distributed Denial-od-Service Attacks: A Tutorial," IEEE Communicatin Magazine, Oct. 2002, pp.42--51.

Digital Library

[3]

A. Belenky and N. Ansari, "On IP Traceback," IEEE Communicatin Magazine, July 2003, pp.142--153.

Digital Library

[4]

S. Savage, D. Wetherall, A. Karlin and T. Anderson, "Network Support for IP Traceback," IEEE/ACM Trans. Net., vol. 9, no. 3, June 2001, pp.226--37.

Digital Library

[5]

D. X. Song and A. Perring, "Advanced and Authenticated Marking Schemes for IP Traceback," Proc. INFOCOM, 2001, vol. 2, pp. 878--86.

[6]

A. Yaar, A. Perrig, and D. Song, "FIT: Fast Internet Traceback," Proc. INFOCOM, 2005, pp.1395--1406.

[7]

S. M. Bellovin, "ICMP Traceback Messages," IETF draft, 2000; http://www.research.att.com/smb/papers/draft-bellovin-itrace-00.txt.

[8]

A. C. Soneren et al., "Single-packet IP Traceback," IEEE/ACM Transactions on Networking, vol. 10, December 2002, pp.721--34.

Digital Library

[9]

U. K. Tupakula and V. Varadharajan, "A proactical method to counteract denial of service attacks," in Proc. Australasian Computer Science Conference (ACSC2003), Adeliaide, australia. Conference in Research and Practice in Information Technology, vol. 16.

Digital Library

[10]

H. Y. Chang et al., "Deciduous: Decentralized Source Identification for Network-Based Intrusion," Proc. 6th IFIP/IEEE Int'l, Symp. Integrated Net. Mgmt., 1999.

[11]

S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. RFC 2401, November 1998.

Digital Library

[12]

J. Lee and G. d. Veciana, "Scalable Multicast Based Filtering and Tracing Framework for Defeating Distributed DoS Attacks," Internation Journal of Networking Management 2005, pp.43--60.

Digital Library

[13]

R. Stone, "Centertrack: An IP Overlay Network for Tracing DoS Floods," Proc. 9th USENIX Sec. Symp., 2000, pp. 319--27.

Digital Library

[14]

M. R. Garey and D. S. Johnson, Computers and Intractability, San Francisco, CA: Freeman, 1979.

Digital Library

[15]

P. Erdös, "On the graph-theorem of Turán," Math. Lapok, vol. 21, pp. 249--251, 1970

[16]

J.A. Bondy and U. S. R. Murty, Graph Theory with Applications, Macmillan, London, 1976.

Digital Library

[17]

A. Medina, A. Lakhina, I. Matta, and J. Byers. BRITE: An Approach to Universal Topology Generation. In Proceedings of the International Workshop on Modeling, Analysis and Simulation of Computer and Telecommunications Systems- MASCOTS '01, Cincinnati, Ohio, August 2001.

Digital Library

[18]

B. M. Waxman, "Routing of Multipoint Connections," IEEE Journal on Selected Areas in Communications, vol. 6, no. 9, December 1988.

Digital Library

Cited By

Wu CLiu TRajaei H(2008)Simulation for intrusion-resilient, DDoS-resistant authentication system (IDAS)Proceedings of the 2008 Spring simulation multiconference10.5555/1400549.1400687(844-851)Online publication date: 14-Apr-2008
https://dl.acm.org/doi/10.5555/1400549.1400687
Wang CChiang Y(2008)Multi-Layer Traceback under the Hierarchical Tracers DeploymentProceedings of the 22nd International Conference on Advanced Information Networking and Applications - Workshops10.1109/WAINA.2008.186(590-595)Online publication date: 25-Mar-2008
https://dl.acm.org/doi/10.1109/WAINA.2008.186
Muthuprasanna MManimaran G(2008)Distributed Divide-and-Conquer Techniques for Effective DDoS Attack DefensesProceedings of the 2008 The 28th International Conference on Distributed Computing Systems10.1109/ICDCS.2008.10(93-102)Online publication date: 17-Jun-2008
https://dl.acm.org/doi/10.1109/ICDCS.2008.10

Index Terms

Tracers placement for IP traceback against DDoS attacks
1. Computer systems organization
  1. Architectures
    1. Distributed architectures
2. Networks
  1. Network architectures

Recommendations

NS-2 based IP traceback simulation against reflector based DDoS attack
AIS'04: Proceedings of the 13th international conference on AI, Simulation, and Planning in High Autonomy Systems

Reflector attack belongs to one of the most serious types of Distributed Denial-of-Service (DDoS) attacks, which can hardly be traced by traceback techniques, since the marked information written by any routers between the attacker and the reflectors ...
Traceback of DDoS Attacks Using Entropy Variations

Distributed Denial-of-Service (DDoS) attacks are a critical threat to the Internet. However, the memoryless feature of the Internet routing mechanisms makes it extremely hard to trace back to the source of these attacks. As a result, there is no ...
A Study of Defense DDoS Attacks Using IP Traceback
IPC '07: Proceedings of the The 2007 International Conference on Intelligent Pervasive Computing

DDoS(Distributed Denial of Service) attack is a critical threat to current Internet. Recently too many technologies of the detection and prevention have developed, but it is difficult that the IDS distinguishes normal traffic from the DDoS attack. ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

cover image ACM Conferences

IWCMC '06: Proceedings of the 2006 international conference on Wireless communications and mobile computing

July 2006

2006 pages

ISBN:1595933069

DOI:10.1145/1143549

General Chairs:
Seizo Onoe
NTT DoCoMo Inc., Japan
,
Mohsen Guizani
Western Michigan University
,
Hsiao-Hwa Chen
National Sun Yat-Sen University, Taiwan
,
Mamoru Sawahashi
NTT DoCoMo Inc., Japan

Copyright © 2006 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

ACM: Association for Computing Machinery

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 03 July 2006

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Article

Conference

IWCMC06

Sponsor:

ACM

IWCMC06: 2006 International Wireless Communications and Mobile Computing Conference

July 3 - 6, 2006

British Columbia, Vancouver, Canada

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

3
Total Citations
View Citations
577
Total Downloads

Downloads (Last 12 months)1
Downloads (Last 6 weeks)0

Reflects downloads up to 18 Nov 2024

Other Metrics

View Author Metrics

Citations

Cited By

Wu CLiu TRajaei H(2008)Simulation for intrusion-resilient, DDoS-resistant authentication system (IDAS)Proceedings of the 2008 Spring simulation multiconference10.5555/1400549.1400687(844-851)Online publication date: 14-Apr-2008
https://dl.acm.org/doi/10.5555/1400549.1400687
Wang CChiang Y(2008)Multi-Layer Traceback under the Hierarchical Tracers DeploymentProceedings of the 22nd International Conference on Advanced Information Networking and Applications - Workshops10.1109/WAINA.2008.186(590-595)Online publication date: 25-Mar-2008
https://dl.acm.org/doi/10.1109/WAINA.2008.186
Muthuprasanna MManimaran G(2008)Distributed Divide-and-Conquer Techniques for Effective DDoS Attack DefensesProceedings of the 2008 The 28th International Conference on Distributed Computing Systems10.1109/ICDCS.2008.10(93-102)Online publication date: 17-Jun-2008
https://dl.acm.org/doi/10.1109/ICDCS.2008.10

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents