A Novel Traceback Approach for Direct and Reflected ICMP Attacks

Different approaches have been proposed to locate the source of a denial of service attack, but these techniques are unable to traceback the source of a reflective attack e.g. SMURF attack. They need a large amount of packets to traceback direct attacks. We propose in this study a new approach based on the behavior of the ICMP protocol. Our approach locates the source of a direct and a reflective ICMP denial of service attacks, using few attack packets.