Multi dimensional multi directional geographical IP traceback mechanism for defense against distributed denial of service attacks

Abstract

Distributed Denial of Service (DDoS) attack involves compromising hundreds of machines all over the internet and is implemented by typically exhausting the bandwidth into hundreds of machines all over network, Router processing capacity or network resources or breaking the network connectivity to the Victims. Success of any traceback scheme is determined by four key factors: Computational overhead involved for packet marking; Memory requirement for packet logging; Scalability of the proposed scheme and The need for cooperation between other domains. In this thesis Multi Dimensional, Multi Directional Geographical IP Traceback mechanism for defense against Distributed Denial of Service attacks , has been addressed. The following three restrictional problems and generalized geographical traceback have been proposed. The DGT scheme proposed by Gao et. al was limited to only 8 directions. For routers having more than 8interfaces, the scheme cannot be applied. To overcome this limitation, this thesis has extended the scheme to include 16 directions and has also generalized the scheme to 2n directions. The second major limitation of DGT scheme of Gao et al is its Two Dimensional representation. This thesis proposes a Three dimensional representation with d(n) directions, where d(n) is the neighborhood direction ratio set generating function using the Direction Ratio Algorithm (DRA). 3. Furthermore this thesis mitigates the impossibility of ensuring adequate space in the packet header during its flight, by the Direction Ratio Sampling Algorithm (DRSA). The overhead of the proposed DGT scheme is very light; The DGT scheme is also scalable. No cooperation between different ISPs is required. newline newline newline