DDoS attacks are a critical threat to the Internet.In this paper,we present a new traceback mechanism for DDoS attacks that is based on entropy variations betw een normal and DDoS attack traffic,w hich is fundamentally different from commonly used packet marking techniques.In comparison to the existing DDoS traceback methods,the presented strategy possesses some advantagesit is memory nonintensive,efficiently scalable,robust against packet pollution,and independent of attack traffic patterns.Description and Analysis on DDoS attack traffic entropy variables based on the characteristics of the t...
