基于流分类的iTrace技术  

ITrace scheme based on traffic classification

作　　者：张婵[1] 徐红云[1] 李娜[1] 

机构地区：[1]湖南大学计算机与通信学院,湖南长沙410082

出　　处：《计算机应用》2006年第6期1337-1339,共3页journal of Computer Applications

基　　金：湖南大学科学基金重点项目(521101626)

摘　　要：通过对ICMP反向追踪技术的研究,提出了一种基于流分类的ICMP反向追踪方案。该方案依据目的位的值将接收流分成目的流和正常流,然后根据网络流量情况,分别对它们使用不同的概率执行ICMP反向追踪。相关分析表明,此方法在路由器的设置被篡改的情况下能获得完整的攻击路径;另外,本方法能更快地重构攻击路径。Through the research on iTraee scheme, an iTrace scheme based on traffic classification was proposed. It classifies incoming traffic into intention traffic and regular traffic based on the value of intention-bit, then performs iTrace scheme with different probability respectively. The analysis shews that this scheme can reconstruct the entire attacking path when the configuration of the router is juggled; and need less time to reconstruct the attacking path than other method.

关 键 词：ICMP反向追踪 拒绝服务攻击 分布式拒绝服务攻击 路由器 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393.08[自动化与计算机技术—计算机科学与技术]