Internet protocol traceback by using dynamic changing packet marking probability method

Nowadays, IP data network infrastructure is inadequate to find the originof DDoS (Distributed Denial of Service) attacks. IP traceback algorithms aredeveloped to abate the characteristic of anonymously available nature of theInternet Protocol and find the origins of these attacks. In this thesis, one of the IPtraceback algorithms, Probabilistic Packet Marking is studied and the density oftraffic between routers? ingress and egress points which IP packets enter and exitis used to develop a new method for the dynamic changing packet markingprobability. Also hop number is added into packet marks to distinguish differentattack paths. The proposed method and the method in the literature are tested byOPNET network simulation software and less number of marked packets isobserved to be enough to find ingress points of routers concerning DDoS attacks.