Abstract: We present a new reconstruction algorithm based on the Advanced Marking Scheme(AMS). It works with a two-dimentional threshold mf,d, decides if a node is on the attack path by judging the situation of the edge of the packet and the Hash value match, then consequently reduces the time of reconstruction and overhead and improves accuracy and stability. Compared with the conventional methods, two-dimentional threshold reconstruction algorithm impves the performance of the IP traceback technique obviously.

Key words: advanced marking scheme, IP traceback, reconstruct rapidly