IP追踪中的新分片标记方法  

A Novel Fragment Marking Scheme for IP Traceback

作　　者：杨杰[1] 胡汉平[1] 王凌斐[1] 

机构地区：[1]华中科技大学图像识别与人工智能研究所,湖北430074

出　　处：《网络安全技术与应用》2006年第3期29-31,35,共4页Network Security Technology & Application

摘　　要：本文基于分片标记的基本原理,提出了一种新的分片标记方法NFMS,并通过模拟实验对攻击源定位方案的时效性、定位大范围DDoS攻击的性能、网络负载、负载处理、部署代价等作了分析和讨论,结果表明新的分片标记方法具有较低的网络负载和计算负载,并且反向定位所需报文个数大大减少,对DoS攻击可达到快速准确的定位,对于小范围的DDoS也具有较好的定位特性。The problem of identifying the sources of the Denial of Service （DOS） attack is one of the most challenging fields among the network security areas. In this paper, we propose a novel and efficient fragment marking scheme for IP traceback named as Novel Fragment Marking Scheme （NFMS）, which extends the mark area. We evaluate the effectiveness of the proposed scheme by various performance metrics through simula- tion studies. The results show that the proposed scheme is practical. The key advantage of NFMS lies in high accuracy, dramatic reduction of the number of packets required for traceback and low processing overhead.

关 键 词：DOS/DDOS 报文概率标记方法 分片标记方法 攻击源定位 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]