End-to-End Network Security: Defense-in-Depth

Chapter 4. Traceback

This chapter covers the following topics:

• Traceback in the Service Provider Environment

• Traceback in the Enterprise

For many years, enterprises, service providers, the government, and many other organizations have tried to develop tools and techniques to aid in the traceback of attacks. This chapter covers several lessons learned and techniques developed over the past to successfully trace back attacks or prepare the infrastructure to make this process easier. The techniques to track individual packets in a network must be done in an efficient, scalable fashion. The main goal of the traceback process is to find the source of attack or malignant traffic. By analyzing the packet contents of the attack traffic, you can determine ...