Ip traceback through modified probabilistic packet marking algorithm using record route

Abstract

Denial of Service attack is precarious causing inconvenience to the legitimate user. Distributed Denial of Service (DDoS) attacks can be traced by finding the attack paths from victim to the attacker. We propose a probabilistic packet marking algorithm using record route feature, i.e., options field of a IPv4 packet header is used. In this field, information of the router is marked and the subsequent routers information is XoRed to get the edge information of attack path. Our approach when compared to other methods finds the attackers with less number of packets and without any false positives and false negatives if the network topology is known.