Um Procedimento Alternativo de Reconstrução de Rota para o Rastreamento de Pacotes IP

A defense strategy against denial-of-service attacks is to trace the source of every attack packet for the sake of penalizing the attacker or isolating him from the network. An IP traceback scheme proposed by the authors suggests that routers notify the victim of their presence in the attack path by inserting traceback information on routed packets. With the received information, the victim initiates a reconstruction procedure to identify the true source of the attack. In this paper, an alternative reconstruction procedure is proposed for IP traceback. We show through analytical and simulation results that the proposed reconstruction procedure traces the attack back to its true source, being effective in the identification of the attacker. Keywords— IP Traceback, Denial of Service, Bloom filters, Computer network security.