A method of IP traceback for DOS

We describe a technique for tracing anonymous packet flooding attacks in the Internet back toward their source. In our approach, forwarding nodes (such as routers) log information with probabilistic about traversing packets on the Internet and then use the log data to trace each packet from its final destination back to its source, hop by hop.