Enhanced ICMP traceback with cumulative path

Denial of service (DoS) and distributed DoS attacks constitutes a major class of security threats today. As the attackers usually use EP spoofing to conceal their real location, several IP traceback mechanisms have been proposed to trace the true source of the attackers to institute accountability. In wireless ad-hoc networks, where the nodes are typically devices with limited bandwidth, computational resource and battery power, and unpredictable routing topology, additional constraint is placed on these tracing techniques to locate the attack sources efficiently. In this paper, we proposed an enhancement scheme to ICMP traceback with cumulative path (ITrace-CP) by performing dynamic probability adjustment against hop distance. Simulations were carried out on wired networks showing performance efficiency improvement of up to 190% and 143%, compared to ITrace-CP, for path lengths of 15 and 20 hops respectively. Further simulations on wireless ad-hoc network also showed significant performance improvement over previous work.