A Novel Traceback Approach for Direct and Reflected ICMP Attacks

A Novel Traceback Approach for Direct and Reflected ICMP Attacks

Different approaches have been proposed to locate the source of a denial of service attack, but these techniques are unable to traceback the source of a reflective attack e.g. SMURF attack. They need a large amount of packets to traceback direct attacks. We propose in this study a new approach based...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Guerid, H., Serhrouchni, A., Achemlal, M., Mittig, K.
Format: Tagungsbericht
Sprache:eng
Schlagworte:
Bandwidth
Computer crime
Computers
Internet
IP networks
Probabilistic logic
Reflection
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:Different approaches have been proposed to locate the source of a denial of service attack, but these techniques are unable to traceback the source of a reflective attack e.g. SMURF attack. They need a large amount of packets to traceback direct attacks. We propose in this study a new approach based on the behavior of the ICMP protocol. Our approach locates the source of a direct and a reflective ICMP denial of service attacks, using few attack packets.
DOI:10.1109/SAR-SSI.2011.5931380