Browse > Article
http://dx.doi.org/10.13089/JKIISC.2003.13.4.3

Design and Implementation of a Traceback System based on Multi-Agents  

정종민 (강원대학교 컴퓨터정보통신공학과)
이지율 (강원대학교 컴퓨터정보통신공학과)
이구연 (강원대학교 전기전자정보통신공학부)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.13, no.4, 2003 , pp. 3-11 More about this Journal
Abstract
It is very important to detect and remove original sources of various attacks through networks. One of the effective method to detect the sources is traceback systems. In this paper, we design and implement an agent-based traceback system that does not require the reaction of routers and administrators and does not need numerous log data. In the design, we introduce a traceback server and traceback agents in each network Using sniffing and spoofing, the server transmits a packet with a specific message. The agents detect the packet and provide the information for the server to trace back the original source.
Keywords
traceback; sniffing; spoofing; traceback server; traceback agents;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Formal Specifications of Traceback Marking Potocol /
[ Chun He ] / Honors Thesis
2 Practical Network support for IP trace-back /
[ Stefan Savage;David Wetherall;Anna R.Karlin;Tom Anderson ] / Proceedings of ACM SIGCOMM
3 Advanced and authenticcated marking schemes for IP Traceback /
[ D.Song;A.Perring ] / Proceedings of IEEE INFO COM
4 Backtracking Spoofed Packets /
[ Tom Dunigan ] / NL/TM-2001/114
5 /
[ D.Dean;Matt Franklin;Adam Stubbl efield ] / An Algebraic Approach to IP Traceback
6 /
[] / CERT coordination center denail of service attack
7 Hash-based IP Trace-back /
[ Alex C. Snoeren;Craig Partridge;Lusi A.Sanchez;Christin E.Jones;Febrice Tchakountio;Stephen T.Kent;W.Timothy Strayer ] / Proceedding of SIGCOMM 2001
8 /
[ S.M.Bellovin ] / ICMP traceback messages