By Topic

A Comparative Study on Different Probabilistic Packet Marking Schemes for IP Traceback

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$33 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

2 Author(s)
Shigeo Shioda ; Department of Urban Environment and Systems, Chiba University, 1-33 Yayoi, Inage, Chiba 263-8522, Japan. ; Hui Jing Wang

Probabilistic packet marking (PPM) is an IP traceback technique that lets routers probabilistically mark packets with partial information of an attack path during packet forwarding. In this paper, we theoretically evaluate the efficiency of typical PPM schemes, including fragment marking, hash marking, multiple hash, and hash fragment schemes, based on a simple analytical model. In particular, for each scheme, we derive an explicit representation of the average number of packets that the victim should receive until the entire attack paths can be reconstructed. We numerically evaluate the efficiency of each PPM scheme in terms of the false negative ratio of the attack path detection

Published in:

TENCON 2006 - 2006 IEEE Region 10 Conference

Date of Conference:

14-17 Nov. 2006