• Proceedings of the Korean Information Science Society Conference
• /
• 2012.06d
• /
• pp.366-368
• /
• 2012

Network Coding approach to IP tracback was proposed by Sattari et al. [5] in order to reduce number of packets required to trace the source of a single attack scenario. In this paper, we analysis and point out limitations and problems of their proof for benefit of network coding to IP traceback.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.12 no.3
• /
• pp.39-47
• /
• 2002

This paper deals with study of a new framework for the traceback of distributed DoS(Denial of Service) attacks in the Internet, in which many sources flood "spoofed" IP packets towards a single victim. In our scheme, the destination host traces those anonymous packets' losses, and infers the logical end-to-end paths back towards the sources. This method is based on the fact that there is a strong correlation between packet losses when those packets traverse along a same route, and the simulation results show high probabilities of detecting the topology under a certain condition. Compared with previous approaches, our scheme has a number of distinct features: It can be performed in realtime or non-realtime, without any supports of routers or ISPs. Our results may be applied to the inference of physical topology and to support previous approaches.pproaches.