On the use of path identification to block attack packets

Farhat, Hikmat (2009) On the use of path identification to block attack packets. In 2nd International Conference on the Applications of Digital Information and Web Technologies, ICADIWT 2009. pp. 619-624 . (doi:10.1109/ICADIWT.2009.5273907).

Abstract

Many techniques have been proposed by the research community to mitigate the effect of flooding Denial of Service (DoS) attacks. The effects of DoS attacks are agravated by the ability of attackers to hide the source of the attack packets. A widely used class of solutions (e.g. trace-back) is based on marking packets, from source to destination, by intermediate routers and selectively blocking packets based on the path they traveled. In this paper we show that router level path identification offers more details then needed. We also show that packets originating from a group of device will follow almost identical paths to the destination. Thus a single attacker can spoof its address in such a way that will lead to a whole group in the source domain to be labeled as attack sources. We argue that a more coarse grained path identification, such as the Autonomous System path identification be used instead.

This record has no associated files available for download.

Contributors

Author: Hikmat Farhat

Download statistics