Network support for ip traceback

The increasing frequency and complexity of Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks pose significant threats to network security and integrity. This thesis presents a sophisticated method for IP traceback by enhancing the Compressed Edge Fragment Sampling (CEFS) algorithm. This improved CEFS method employs an innovative packet marking technique that integrates a secret key-sharing mechanism among servers for accurate packet origin authentication. This approach involves encrypting packet identifiers using a shared secret key among the involved servers, significantly improving the efficiency of tracing the origins of malicious packets. Comparative evaluations with other IP traceback methods, such as ICMP Traceback and Ingress Filtering, reveal that the revised CEFS algorithm is more efficient and effective, particularly in scenarios following an attack. By providing more effective countermeasures against DoS and DDoS attacks, this thesis contributes valuable solutions that bolster network resilience against these widespread threats. This research not only advances cybersecurity technology but also delivers a viable framework for enhancing network security architectures in practical settings.