自治系统的攻击入口追溯技术研究  

A Study on IP Traceback of DDoS Attack Ingress within an Autonomous System

作　　者：金光[1] 赵杰煜[1] 赵一鸣[1] 王肖虹[1] 

机构地区：[1]宁波大学信息科学与工程学院,宁波315211

出　　处：《电子与信息学报》2005年第3期346-350,共5页Journal of Electronics & Information Technology

基　　金：浙江省科技力重点项目(2003C21009)宁波市软件产业发展基金(R200336)宁波大学校内科研基金资助课题

摘　　要：针对因特网上的DDoS攻击,捉出一种新的以自治系统为单位的攻击入口追溯模型,通过在入口链路端进行地址标记,受害主机能以较低的运算复杂度还原出攻击入口。详细描述了算法的物理模型和数学依据,给出了还原虚报率和关联函数的理论公式。对自治系统结构与出入口链路的关系作了阐述,并讨论了该模型的部署应用。具体的示例和试验表明,该算法效果理想,具有理论和衫价值。To defend against DDoS attacks on Internet, a new scheme called Ingress Address Marking (IAM) within an Autonomous System (AS) is proposed, with which the IP addresses of the ingress can be embedded into the forwarding packets. A victim can traceback the addresses of the attack ingress in a low complexity by analyzing the marking information. Besides the physical model, the mathematical formulation of false positive ratio and correlation function are provided. The relationship of the ingress link and the structure of AS is reviewed. The construction and deployment of IAM are discussed. Simulation results have shown that this scheme has a good performance and is valuable on both theory and application.

关 键 词：DDOS攻击 自治系统 链路 算法 地址 部署 主机 数学 网上 机能 

分 类 号：TN915[电子电信—通信与信息系统] TP393[电子电信—信息与通信工程]