Abstract:A new edge sampling approach called the'Router's Vector-Edge-Sampling(RVES)'is presented,which is simple for PPM(probability packet marking)to be implemented and deployed.In the graph model,vertexes are denoted by network interfaces instead of routers,while edges by vector edges instead of traditional ones.With better simplicity of implementation and flexibility of policy deployment,RVES features effectiveness for Distributed Denial-of-Service(DDoS)attack reconstruction.PPM technologies based on traditional edge sampling are still applicable.Prototypes have been deployed in the Internet and experiments prove the effectiveness and feasibility of RVES.