Smite

In this paper we present a new approach to IP packet traceback called SMITE which allows efficient traceback of the origin of a packet with incorrect or spoofed source addresses through an integration of software-defined networks (SDN) [15] and Multiprotocol Label Switching (MPLS) [13] in OpenFlow [19]. SMITE leverages the flexibility of SDN and the strength of MPLS network to achieve low false positive rate, ability to perform post-mortem traceback, reduction in storage pressure/ hardware investment and most importantly the ability to perform traceback for a single spoofed packet. SMITE also aims to overcome the difficulties and limitations of legacy traceback mechanisms.