A novel Authenticated Packet Marking Scheme for IP Trace-back

A novel authenticated packet marking scheme for IP trace-back is proposed in this paper, it is based on the probabilistic packet marking scheme developed by Savage, et a. The new scheme adopts a new dynamic probability value sequence to mark packets and uses the IP capital checksum to check the marked information. Compared with PPM scheme, The new scheme doesn't need the topology and it improves a lot on precision, computation, convergence and security. It is easy to be implemented and can track distributed denial of service attacks effectively.