基于合作过滤机制的ICMP回溯DDoS攻击源方法  

An ICMP Traceback Method of DDoS Attack Source Based on Cooperative Filtering Mechanism

作　　者：罗淇方[1] 钟诚[1] 李智[1] 杨锋[1] 冯艳华[1] 

机构地区：[1]广西大学计算机与电子信息学院,广西南宁530004

出　　处：《计算机技术与发展》2006年第9期240-242,F0003,共4页Computer Technology and Development

基　　金：广西科学基金(桂科自0339008);广西科技信息网络中心;广西大学博士科研基金(B0309031)

摘　　要：提出一种改进的ICMP回溯方法。此方法是基于合作过滤机制的,采用合作过滤机制能够使产生的ICMP回溯包更有效并在尽可能靠近DDoS攻击源的地方过滤攻击包和保护合法包,改进后的ICMP方法对引发ITrace包的IP包从靠近攻击源的地方同步跟踪到受害者,提高了重构攻击路径的速度和准确性。Presents an improved ICMP traceback method based on cooperative filtering mechanism. The cooperative filtering mechanism can generate ICMP traceback packets more efficiently and feltrate attack packets and protect legal packets the location of DDoS attack source as closely as possible. The improved ICMP traceback method tracks victim synchronously from the location near the attack source by the IP packets which evokes ITrace packets,and it enhances the speed and accuracy of reconstructive traceback path.

关 键 词：ICMP回溯 合作过滤机制 DDOS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]