Winnowing double structure for wildcard query in payload attribution

Abstract

Payload attribution is a kind of traceback mechanism which has the ability to find the sources and destinations of packages containing certain excerpts and times of their occurrence. Existing payload attribution methods either fail to support wildcard query or suffers from low response speed. We propose Winnowing Double Structure with Wildcard Query (WDWQ), which support wildcard query efficiently and achieve higher wildcard query speed as well as lower false positive rate under an acceptable data reduction ratio. Our experiment shows that WDWQ is 20 times faster than the state-ofthe- art payload attribution techniques.