A Novel Hybrid IP Traceback Scheme with Packet Counters

In this paper we shall propose a novel hybrid IP traceback scheme with packet counters. In our scheme, a (packet) counter is used to improve correlation of packet sampling in order to reconstruct the attack tree efficiently. Our scheme has the remarkable advantages: (1) itis simple and efficient, (2) it is significantly resistant to attacks, (3) it requires a lower sampling rate compared with previous work, e.g., only 1% is enough, (4) its false positive/negative rates are also lower.5th International Conference, IDCS 2012, Wuyishan, Fujian, China, November 21-23, 2012. Proceeding