Design and implementation of unauthorized access tracing system

Abstract

We propose a hop-by-hop IP traceback method that can reliably trace the source of an attack. In this paper, we describe the development and the evaluation of our prototype system. The main features of our proposed method are the packet feature, which is composed of specific packet information contained in a packet for identification of an unauthorized packet, and an algorithm using the datalink identifier to identify routing of a packet. We show the development of the prototype system equipped with our tracing functions on routers and its processing result as well as trace time.