Tracing Attackers with Trust-Based Deterministic Packet Marking (Paperback)

Computer network attacks are on the increase and are more sophisticated in today's network environment than ever before. One step in tackling the increasing spate of attacks is the availability of a system that can trace attack packets back to their original sources irrespective of invalid or manipulated source addresses. This project introduces a novel use of these maps to influence IP traceback in general, and packet marking schemes in particular. The Trust-based deterministic packet marking approach is capable of tracing back attacks, which are composed of just a few packets. Since a trust relationship will be maintained between routers for revealing the attacker's information, the overall overhead for tracebacking will be minimal. In addition, a service provider can implement this scheme without revealing its internal network topology.