Importance

Loading Importance Indicators...

Abstract

An apparatus and method for providing traceback connection using a connection redirection technique are provided. A packet blocking unit blocks an attack packet transmitted to the system and a first response packet output from the system in response to the attack packet, if a system attack sensing signal is received. A response packet generation unit generates a second response packet into which a watermark is inserted, in response to the attack packet, and transmits the second response packet to a system corresponding to the source address of the attack packet. A path traceback unit receives a detection packet containing transmission path information of the second response packet from a system existing on a transmission path of the second response packet, and based on the received detection packet, traces back the transmission path of the second response packet and identifies the location of the attacker system. According to the apparatus and method, even when an attacker attacks a predetermined system via a plurality of systems, the actual location of the attacker system can be traced back fast and accurately and damage of the victim system can be minimized.

Loading the Abstract Image...

First Claim