A path information caching and aggregation approach to traffic source identification

Fu Hau Hsu, Tzi Cker Chiueh

研究成果: 會議貢獻類型會議論文同行評審

6 引文 斯高帕斯(Scopus)

摘要

Probabilistic packet marking (PPM) is a technique designed to identify packet traffic sources with low storage and processing overhead on network routers. In most previous PPM approaches, individual path messages carry only partial path information. These methods are susceptible to "path falsification" attacks, which greatly reduce their effectiveness. This work proposes a path-falsification-attack free PPM algorithm called Path Information Caching and Aggregation (PICA) that records paths of packet streams in fix-length path messages, thus eliminating the need of path reconstruction at the receiver end. Besides, by using a router's forwarding table to decompose packet volume, this semi-stateful method is more accurate in traffic volume report. It also supports both a packet rate-based path message generation algorithm and a redundant path message suppression mechanism to further eliminate path messages with the same destination. Finally; PICA protects PICA routers from being attacked by faked path messages. We have performed a trace-driven simulation study on the proposed PICA algorithm and compared its effectiveness with lETF's iTrace scheme by varying the sampling probability, the number of attack sources, and attack traffic rate. Compared to iTrace, the PICA algorithm reduces the total number of path messages required by a factor of more than 2, while reporting traffic volume more accurately.

原文???core.languages.en_GB???
頁面332-339
頁數8
出版狀態已出版 - 2003
事件23th IEEE International Conference on Distributed Computing Systems - Providence, RI, United States
持續時間: 19 5月 200322 5月 2003

???event.eventtypes.event.conference???

???event.eventtypes.event.conference???23th IEEE International Conference on Distributed Computing Systems
國家/地區United States
城市Providence, RI
期間19/05/0322/05/03

指紋

深入研究「A path information caching and aggregation approach to traffic source identification」主題。共同形成了獨特的指紋。

引用此