Study and Implementation of Identification-based Packet Marking and Route Traceback in IP-based Networks

• Main Authors: Huang, Tim Hann, 黃民翰
• Other Authors: Chao, Hsi-Lu
• Format: Others
• Language: en_US
• Online Access: http://ndltd.ncl.edu.tw/handle/27350386573073265726

碩士 === 國立交通大學 === 資訊科學與工程研究所 === 97 === Along with the development of Internet, network security becomes important. Many attackers spoofed the source address of the packets in the internet. The method of traceback would not trace the true path of source which is spoofed. The method of traceback used the source address of the packet and sent the packet to the source address. The router along the path will return the IP address of itself. The victim can used these messages to rebuild the path. But the source address is spoofed so that the trace path is wrong. According to this reason, packet marking used to get the accurate trace path. The packets across the marking machine were marked by marking procedure. The victim could collect or gather the marking information to trace the accurate paths. This paper describes a simple method of packet marking for IP traceback. The packets with spoofing address could be traced the accurate paths by marking information. The Identification-based Packet Marking (IPM) for Real-Time/Non-Real-Time is effective to trace route. The IPM marks identifiers to the IP Option field and los the marking information. Afterwards, we could find the path of packet’s transmission by analyzing the marking information.