Browse > Article
http://dx.doi.org/10.13089/JKIISC.2010.20.3.31

An IP Traceback "M"echanism with "E"nhanced "I"ntegrity for IPv6-based NGN Environment  

Jang, Jae-Hoon (Soonchunhyang University)
Yeo, Don-Gu (Soonchunhyang University)
Choi, Hyun-Woo (Soonchunhyang University)
Youm, Heung-Youl (Soonchunhyang University)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.20, no.3, 2010 , pp. 31-41 More about this Journal
Abstract
It is difficult to identify attacker's real location when the attacker spoofs IP address in current IPv4-based Internet environment. If the attacks such as DDoS happen in the Internet, we can hardly expect the protection scheme to respond to these attacks in active or real-time manner. Many traceback techniques have been proposed to protect against these attacks, but most traceback schemes were designed to work with the IPv4-based Internet and found to be lack of verification of whether the traceback related information is forged or not. Few traceback schemes for IPv6-based network environment have been suggested, but it has these disadvantages that needs more study. In this paper, we propose the reliable IP traceback scheme supporting integrity of traceback-related information in IPv6 network environment, simulate it, and compare our proposed scheme with exsisting traceback mechanisms in terms of overhead and functionality.
Keywords
Traceback; IP Traceback; IPv6; NGN;
Citations & Related Records
Times Cited By KSCI : 2  (Citation Analysis)
연도 인용수 순위
1 W.T. Strayer, C.E. Jones, F. Tchakountio and R.R. Hain, "SPIE-IPv6: Single IPv6 Packet Traceback," Proceedings of the 29th Annual IEEE International Conference on Local Computer Networks, pp. 118-125, Nov. 2004
2 Steve Bellovin, Marcus Leech, and Tom Taylor, "ICMP Traceback Messages", IETF Internet Draft, Version 4, February 2003
3 S. Deering and R. Hinden "Internet Protocol, Version 6 (IPv6) Specification", RFC2460, Dec. 1998
4 Shokri, Reza, A. Varshovi, H. Mohammadi, N. Yazdani, and B. Sadeghian, "DDPM: Dynamic Deterministic Packet Marking for IP Traceback," IEEE International Conference on Networks. Singapore. pp. 1-6, Sep. 2006
5 Rack-Hyun Kim, Jae-Hoon Jang, Heung-Youl Youm, "An Efficient IP Traceback mechanism for the NGN based on IPv6 Protocol," JWIS 2009, August 2009.
6 S. O. Amin, C. Seon, "On IPv6 traceback," ICACT 2006, Feb. 2006.
7 S.K. Rayanchu and G. Barua, "Tracing Attackers with Deterministic Edge Router Marking (DERM)," Distributed Computing and Internet Technology, First International Conference, Bhubaneswar, India, pp. 400-409, Dec. 2004.
8 허준, 강명수, 홍충선, "IPv6 네트워크 환경에서의 경량화된 IP 역추적 기법," 한국정보보호학회 논문지, 17(2), pp. 93-102, 2007년 4월.   과학기술학회마을
9 A.C. Snoeren, C. Partridge, L.A. Sanchez, C.E. Jones, F. Tchakountio, B. Schwartz, S.T. Kent, and W.T. Strayer, "Single-Packet IP Traceback," IEEE/ACM Transactions on Networking, pp. 721-734, Dec. 2002   DOI   ScienceOn
10 Hazeyama, Hiroaki, Y. Kadobayashi, D. Miyamoto, and M. Oe, "An Autonomous Architecture for Inter-Domain Traceback across the Borders of Network Operation," Proceedings of the 11th IEEE Symposium on Computers and Communications, Cagliari, Sardinia, Italy, pp. 378?385, June, 2006.
11 H.C.J. Lee, M. Ma, V.L.L. Thing, and Y. Xu, "On the Issues of IP Traceback for IPv6 and Mobile IPv6," Proceedings of the IEEE International Symposium on Computers and Communication, pp. 582-587, July 2003.
12 X. Zeltsan, "Guidelines for NGN Security Release," ITU-T, FGNGN, FGNGN-OD-00254, Nov. 2005.
13 한정화, 김락현, 류재철, 염흥열, "역추적 기술 및 보안 요구사항 분석," 한국정보보호학회지, 18(5), pp. 132-141, 2008년 10월   과학기술학회마을
14 S. Savage, D. Wtherall, A. Karlin, and T. Anderson,, "Practical Network Support for IP Traceback," Proceedings of ACM SIGCOMM 2000, pp. 295-306, Oct. 2000.
15 E. Albright and X. H. Dang, "An Implementation of IP Traceback in IPv6 Using Probabilistic Packet Marking," Proceedings of International Conferencee on Internet Computing (ICOMP 05), June, 2005.