Abstract: Traditional IP traceback schemes can not trace the attacking sources quickly enough when facing large-scale DDoS attack. This paper presents an Optimized Marking Scheme（OMS） based on the characteristic of DDoS traffic distribution. This sheme inserts some

Key words: DDoS, IPtraceback,Traffic distribution