Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Tracing attack packets to their sources, known as IP traceback, is an important step to counter distributed denial-of-service (DDoS) attacks. ,  propose a novel packet logging based (i.e., hash-based) traceback scheme that requires an order of magnitude smaller processing and storage cost than the hash-based scheme proposed by Snoeren, et al. (2001), thereby being able to scalable to much higher link speed (e.g., OC-768). The baseline idea of our approach is to sample and log a small percentage (e.g., 3.3%) of packets. The challenge of this low sampling rate is that much more sophisticated techniques need to be used for traceback. Our solution is to construct the attack tree using the correlation beten the attack packets sampled by neighboring routers. The scheme using naive independent random sampling does not perform ll due to the low correlation beten the packets sampled by neighboring routers.  invent a sampling scheme that improves this correlation and the overall efficiency significantly. Another major contribution of this work is that  introduce a novel information-theoretic framework for our traceback scheme to ansr important questions on system parameter tuning and the fundamental trade-off beten the resource used for traceback and the traceback accuracy. Simulation results based on real-world network topologies (e.g. Skitter) match very ll with results from the information-theoretic analysis. The simulation results also demonstrate that our traceback scheme can achieve high accuracy, and scale very ll to a large number of attackers (e.g., 5000+).
['Jun Li', 'Minho Sung', 'Jun Xu', 'Li Li']
I am writing a research paper on a idea Large-scale IP traceback in high-speed Internet: practical techniques and theoretical foundation
[{"from": "human", "value": "I am writing a research paper on a idea Large-scale IP traceback in high-speed Internet: practical techniques and theoretical foundation"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Tracing attack packets to their sources, known as IP traceback, is an important step to counter distributed denial-of-service (DDoS) attacks. ,  propose a novel packet logging based (i.e., hash-based) traceback scheme that requires an order of magnitude smaller processing and storage cost than the hash-based scheme proposed by Snoeren, et al. (2001), thereby being able to scalable to much higher link speed (e.g., OC-768). The baseline idea of our approach is to sample and log a small percentage (e.g., 3.3%) of packets. The challenge of this low sampling rate is that much more sophisticated techniques need to be used for traceback. Our solution is to construct the attack tree using the correlation beten the attack packets sampled by neighboring routers. The scheme using naive independent random sampling does not perform ll due to the low correlation beten the packets sampled by neighboring routers.  invent a sampling scheme that improves this correlation and the overall efficiency significantly. Another major contribution of this work is that  introduce a novel information-theoretic framework for our traceback scheme to ansr important questions on system parameter tuning and the fundamental trade-off beten the resource used for traceback and the traceback accuracy. Simulation results based on real-world network topologies (e.g. Skitter) match very ll with results from the information-theoretic analysis. The simulation results also demonstrate that our traceback scheme can achieve high accuracy, and scale very ll to a large number of attackers (e.g., 5000+)."}]