Traceroute-based target link flooding attack detection scheme by analyzing hop count to the destination

Abstract

In this paper, we propose traceroute-based target link flooding attack (TLFA) detection scheme by analyzing hop count to the destination. Since the destinations of the attacker's traceroutes tend to be concentrated around a target link, classifying traceroutes by hop count can highlight attacker's traceroute. Thus, the proposed scheme can detect the attack even if an attacker slowly executes traceroutes and the ratio of legitimate user's traceroutes is high. By computer simulations, we show our scheme has more robustness compared with the conventional scheme.