This is archived content, mostly untouched since 2003. For newer content/updated versions, see netfuture.ch/Publications.
First page Back Continue Last page Overview Text

Summary. State explosion. Easily introduce false edges. Basically anywhere in graph. Not closer than closest attacker. Stop closest attackers before . Statistically hard to determine. Not talked about. IP already creates state explosion. Statistically easy to determine. (with fewer than a few thousand attackers). Reuse of collisions.

Notes:


Attacker Q (marked in cyan) can insert fake edges anywhere outside the cyan border encircling V.
A GOSSIB attack is hard to distinguish from real traceback information. In fact, we believe that any statistical method that can be applied to distinguish can be fooled. Even worse, putting in statistical analysis on the validity of attack edges or fragments will allow the attackers to remove real attack edges from the victim-reconstructed attack graph.