Hybrid Packet Marking IP Traceback Technique over IPv4, IPv6 and Mobile IPv6
نویسنده
چکیده
-Cyber-attacks are increasing day by day. Each time attackers or malicious users come up with new techniques or methods in order to harm the network system of particular organization. While attacking on any organization, the main focus of the attacker is to successfully launch attack against organization’s network system by hiding its own identity under the identity of other legitimate user in order to not to get traceback. This technique is called IP spoofing. This technique is mostly used by the attackers while performing Denial of service (DoS) or Distributed Denial of service (DDoS) attacks. The need of IP traceback technique arises to trace the originator of the DoS and DDoS attacks. There are different kinds of IP traceback technique that are used to successfully traceback origin of the attack. In this research work, the Hybrid packet marking TTL and Hop Limit based identification technique is applied on IPv4 and IPv6 network respectively. In this technique, only the first router in the path marks its identity into the packet. In the IPv4 network, the first router in the path is identified using the TTL value of IPv4 packet header and in IPv6, the hop limit value is used to for the same. In the case of Mobile IP, where the attacking node is movable between the different networks, TTL based identification mechanism and Hop limit based hybrid traceback technique can be used for Mobile IPv4 and Mobile IPv6 respectively. In the mobile IP network, the address of home agent will be marked into the packet both for MIPv4 and MIPv6. In this research work, both the techniques i.e. hybrid TTL based identification and hybrid Hop limit based packet marking technique are simulated for wired and wireless IPv4 and IPv6 networks. The result shows the successful traceback of the nodes through the marking information in IPv4, IPv6 and Mobile IP
منابع مشابه
ROUTER INTERFACE BASED IP TRACEBACK METHOD FOR DDOS ATTACK IN IPV6 NETWORKS S.T.Shenbagavalli
DoS/DDoS attacks constitute one of the major classes of security threats in the Internet today. The attackers usually use IP spoofing to conceal their real location. The objective of IP traceback is to determine the real attack sources, as well as the full path taken by the attack packets. Traditional traceback schemes provide spoofed packets traceback capability either by augmenting the packet...
متن کاملEnd-to-End QoS Provisioning by Flow Label in IPv6
IPv6 as IP next generation is the successor to IPv4. IPv6 not only solves the shortcomings problem of IPv4 address, but also benefits the QoS especially during network congestion. Flow label field in IPv6 packet header provides an efficient way for packet marking, flow identification, and flow state lookup. This paper proposes the end-to-end QoS provisioning mechanism by utilizing 3-tuple inste...
متن کاملAn Implementation of IP Traceback in IPv6 Using Probabilistic Packet Marking
Lack of source authentication in the IP protocol helps to encourage denial-of-service attacks. The open and trusting nature of the protocol makes the task of identifying an attacker difficult if the attacker chooses to spoof the source address. Probabilistic Packet Marking is an IP traceback approach that seeks to identify attackers by marking individual packets with some portion of the attack ...
متن کاملIPv6 Traceback Using Policy Based Management System
Most of the cyber attacks use spoofed IP packets to cast an attack. The stateless nature of IP makes it nearly impossible to identify the true source(s) of these attacks. With the help of IP traceback techniques, we try to identifying the true source of an IP datagram in Internet. While many IP traceback techniques have been proposed, but most of the previous studies focus and offer solutions f...
متن کاملTracing the True Source of an IPv6 Datagram Using Policy Based Management System
In any (D)DoS attack, invaders may use incorrect or spoofed IP addresses in the attacking packets and thus disguise the factual origin of the attacks. Due to the stateless nature of the internet, it is an intricate problem to determine the source of these spoofed IP packets. This is where; we need the IP traceback mechanism i.e. identifying the true source of an IP datagram in internet. While m...
متن کامل