Effective packet marking approach to defend against DDoS attack

Abstract

Distributed Denial of Service (DDoS) attack is one of the remained problems that has still not solved. In most case, these attacks raise the flows of packets with spoofed IP, thus it is too hard to decide what packet is attack packet or not. Up to now, various studies have been proposed to defend against DDoS attacks. We don't still have had a fitting solution to solve it. Abraham et al. presented Pi that is scheme to marks packet's path.Pi is a scheme that marks traveling information of each packet on itself. Pi is a new, simple and robust approach but, Pi can have poor marking value filled with garbage when there are too small routers which participated in marking. This brings the loss of information. We propose a new marking approach that improves the previous Pi marking scheme. It has a higher accuracy value than previous Pi making. © Springer-Verlag Berlin Heidelberg 2004.