An Effective Internet level Traceback System for Identifying the Locations of IP Spoofers from Path Backscatter
Keywords:
Internet, IPaddress ,traceback mechanism, Spoofer, protocol.Abstract
It is normal that the attackers over the network may use the fake source IP address to conceal their actual locations. This paper proposes a framework that bypasses the deployment challenges of IP Traceback techniques [1]. This system researches Internet Control Message Protocol error messages (named path backscatter) activated by spoofing traffic, and tracks the Spoofers based on the information available by the public(e.g., topology). Along these, the proposed framework can discover the Spoofers with no deployment prerequisite. Despite the fact that the proposed framework can't work in all the spoofing attacks, it might be the most helpful mechanism to trace Spoofers before an Internet-level traceback framework has been deployed in real. The results are got by implementing in the form of simulation using Java platform for understanding the system over the networks.
References
- Passive IP Traceback: Disclosing the Locations of IP Spoofers From Path Backscatter Guang Yao, Jun Bi, Senior Member, IEEE, and Athanasios V. Vasilakos, Senior Member. S. M. Bellovin, Security problems in the TCP/IP protocol suite,‖ACM SIGCOMM Comput.Commun. Rev., vol. 19, no. 2, pp. 32–48,Apr. 1989.
- ICANN Security and Stability Advisory Committee, Distributed denial of service (DDOS) attacks,‖ SSAC, Tech. Rep. SSAC Advisory SAC008,Mar. 2006.
- C. Labovitz, Bots, DDoS and ground truth,‖ presented at the 50thNANOG, Oct. 2010.
- The UCSD Network Telescope. [Online]. Available: http://www.caida.org/projects/network_telescope/
- S. Savage, D. Wetherall, A. Karlin, and T. Anderson, Practical network support for IP traceback,‖ in Proc. Conf. Appl., Technol., Archit., Protocols Comput. Commun. (SIGCOMM), 2000, pp. 295–306.
- S. Bellovin. ICMP Traceback Messages.[Online]. Available: http://tools.ietf.org/html/draft-ietf-itrace-04, accessed Feb. 2003.
- A. C. Snoeren et al., Hash-based IP traceback,‖ SIGCOMM Comput. Commun. Rev., vol. 31, no. 4, pp 3–14, Aug. 2001. [8] D. Moore, C. Shannon, D. J. Brown, G. M. Voelker, and S. Savage,Inferring internet denial-of-service activity,‖ ACM Trans. Comput. Syst., vol. 24, no. 2, pp. 115–139, May 2006. [Online]. Available: http://doi.acm.org/10.1145/1132026.1132027
- M. T. Goodrich, Efficient packet marking for large- scale IP traceback,‖in Proc. 9th ACM Conf. Comput. Commun.Secur. (CCS), 2002,pp. 117–126.
- D. X. Song and A. Perrig, Advanced and authenticated marking schemes for IP traceback,‖ in Proc. IEEE 20th Annu. Joint Conf. IEEE Comput.Commun.Soc. (INFOCOM), vol. 2. Apr. 2001, pp. 878–886.
- A. Yaar, A. Perrig, and D. Song, FIT: Fast internet traceback,‖ in Proc. IEEE 24th Annu. Joint Conf. IEEE Comput.Commun.Soc. (INFOCOM), vol. 2. Mar. 2005, pp. 1395–1406.
- J. Liu, Z.-J.Lee, and Y.-C. Chung, Dynamic probabilistic packet marking for efficient IP traceback,‖ Comput.Netw., vol. 51, no. 3, pp. 866–882, 2007.
- K. Park and H. Lee, On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack,‖ in Proc. IEEE 20th Annu. Joint Conf. IEEE Comput.Commun.Soc. (INFOCOM), vol. 1. Apr. 2001, pp. 338–347
Downloads
Published
Issue
Section
License
Copyright (c) IJSRCSEIT
This work is licensed under a Creative Commons Attribution 4.0 International License.