Title: Hash-based IP Traceback Speaker: James Griffioen, Associate Professor, Department of Computer Science, UK Talk Abstract: Intrusion detection has become increasingly important to network operators given the rise in denial of service attacks and other security preaches. The design of the IP protocol makes it difficult to reliably identify the originator (bad guy) that sent the IP packet. Even in the absence of any deliberate attempt to disguise a packet's origin, wide-spread packet forwarding techniques such as NAT and encapsulation may obscure the packet's true source. This talk will present a recent paper that describes a hash-based technique for IP traceback. It generates audit trails for traffic within the network, and can trace the origin of a single IP packet delivered by the network in the recent past. The author demonstrate that the system is effective, space-efficient (requiring approximately 0.5% of the link capacity per unit time in storage), and implementable in current or next-generation routing hardware.