A SINGLE-PACKET IP TRACEBACK: COMBATING DOS-DDOS ATTACKS

Abstract

Cyber-attacks such as Denial of Service (DoS) and Distributed Denial of Service(DDoS) can affect Internet security so that they become a major threat to the computer and computer networks. Therefore, several IP traceback methods were developed to trace back each attack packet to its origin of the attack. These schemes require many packets to trace back the origin of the DoS attack. In this paper, we proposed a novel approach that can trace back the origin of the DoS attack using a single packet-based on Deterministic Packet Marking (DPM) and Probabilistic Router Logging(PRL). Our experimental results, using NS-3 simulator, show that our novel proposed approach can reconstruct the attack path from the victim target to the exact attacker after receiving only a single attack packet. Moreover, this novel proposed approach detects spoofed attack packets in reactive and proactive schemes so that our proposed traceback solution is, therefore, robust because it has a null false positive (negative) rate.

DISCLOSURE STATEMENT

No potential conflict of interest was reported by the author(s).

Additional information

Notes on contributors

Haddadi Mohamed

Mohamed Haddadi working as senior lecturer in Faculty of Economics at University of Boumerdes, Algeria. He received Magistere and doctorate degree in Computer Science from University of Bejaia, Algeria. His research interests include Cloud Computing Security, data mining and ontology.

Youcef Ouldmohamed

Youcef Ould Mohamed working in Algeria Telecom for more than 15 years. He received his computer science engineer diploma and Master degree in computer science from University of Setif, Algeria. His research interests include Computer Network security and Next Generation Network (NGN).

Bahnes Nacera

Nacera Bahnes working as Master Assistant in Faculty of Exact Sciences and Computer Science in Computer Science Department at University of Abdelhamid Ibn Badis of Mostaganem, Algeria. She obtained Magistere in computer science from University of Oran, Algeria. She also works as Phd-student in Research Laboratory in Industrial Computing and Networks Laboratory (RIIR) at University of Ahmed Ben Bella of Oran, Algeria. Her research interests include VANET, WSN, ITS, Security, and Operational Research.