Markov Chain Modelling of the Probabilistic Packet Marking Algorithm

10.6633/IJNS.200707.5(1).04

Tsz-Yeung Wong；John Chi-Shing Lui；Man-Hon Wong

Denial-of-service attack ； IP traceback ； Markov chain model ； PPM algorithm

International Journal of Network Security

5卷1期（2007 / 07 / 01）

32 - 40

英文

In this work, we show that the current termination condition of the Probabilistic Packet Marking (PPM) algorithm is not correct for general networks, and this implies the estimation of expected number of marked packets is not accurate. As a result, this may lead to an incomplete attack graph construction. To remedy this problem, we propose a Markov chain modelling of the PPM algorithm. By applying the fundamental matrix theory, one can result in an accurate estimation of the expected number of marked packets. Our simulation results show that the Markov chain modelling technique is effective in calculating the expected number of marked packets.