NCSU Institutional Repository >
NC State Theses and Dissertations >
Dissertations >

Please use this identifier to cite or link to this item: http://www.lib.ncsu.edu/resolver/1840.16/3806

Title: On Network-Layer Packet Traceback: Tracing Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) Attacks
Authors: Wu, Chien-Lung
Advisors: Edward Gehringer, Committee Member
George N. Rouskas, Committee Member
Shyhtsun Felix Wu, Committee Co-Chair
Arne A. Nilsson, Committee Chair
Keywords: Hybrid iTrace
Intention-Driven iTrace
Traceback
DoS
DDoS
iTrace
ICMP Traceback
IPSec
Network-Layer Tracing
Issue Date: 7-Jan-2004
Degree: PhD
Discipline: Electrical Engineering
Abstract: The objective of this research is to study the Internet Protocol (IP) traceback technique in defeating Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks. Tracing attackers is the first and most important step to solve the DoS/DDoS problem. In this dissertation, two new traceback techniques, PHIL and Intention-Driven iTrace, are proposed and evaluated. Based on the IPSec infrastructure, previously, the Decentralized Source Identification for Network-based Intrusions (DECIDUOUS) module has been implemented and evaluated. However, in order to trace attack sources across different administrative domains securely, the notion of Packet Header Information List (PHIL) for IPSec is proposed to enhance DECIDUOUS module. Second, it is shown, in this thesis, that the iTrace (ICMP traceback, being standardized in IETF) has some serious drawbacks. To overcome these drawbacks, the Intention-Driven iTrace (ID-iTrace) and the Hybrid iTrace schemes are proposed. Our simulation results confirm that the original iTrace scheme is not able to handle low attack traffic well. From our simulation, the Hybrid iTrace scheme is evaluated and demonstrated to be an efficient and practical mechanism for tracing DoS/DDoS attacks.
URI: http://www.lib.ncsu.edu/resolver/1840.16/3806
Appears in Collections:Dissertations

Files in This Item:

File Description SizeFormat
etd.pdf2.98 MBAdobe PDFView/Open

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.