An AS-level IP traceback system

Distributed Denial of Service (DDoS) attacks represent a serious threat to the appropriate operation of Internet services. To deal with this threat, we propose an IP traceback system (IPTS) intended to be deployed at the level of Autonomous Systems (ASes). Our IPTS requires a priori no knowledge of the network topology while allowing single-packet trace-back and incremental deployment.