An Efficient Mac-Based ICMP Verification Algorithm for Early Detection of Bandwidth-Depleting DDOS Attacks

Abstract:

Distributed Denial-of-Service (DDoS) attacks continue to pose a significant threat to the availability and reliability of online services. This paper presents a novel detection algorithm that leverages Message Authentication Code (MAC)-based verification of ICMP traffic to identify and block bandwidth-depleting DDoS attacks. Unlike threshold-based or machine learning-dependent techniques, the proposed algorithm uses IP and MAC address correlation to validate the legitimacy of packets, effectively filtering spoofed traffic in real time. The approach was implemented and tested using the NS-2 simulation environment. Results demonstrate an average detection accuracy of 88.89%, with zero false positives and negligible resource overhead. The proposed method offers a lightweight and effective solution suitable for deployment in edge and enterprise networks. This research contributes a simple yet robust technique to the existing portfolio of DDoS mitigation strategies.