基于StackSF的DDoS攻击和IP欺骗新型防御机制  

A New Defense Mechanism against DDoS Attacks and IP Spoofing Based on StackSF

作　　者：邬恺夫[1] 朱军[1] 王文芳[1] 李红蕾[2] 马钊[3] 

机构地区：[1]河南省工业情报标准信息中心,郑州450003 [2]河南师范大学,新乡453000 [3]郑州旅游职业学院计算中心,郑州450009

出　　处：《河南科学》2006年第6期906-911,共6页Henan Science

摘　　要：针对互联网上的主机正面临着IP欺骗和大规模分布式拒绝服务(DDoS)攻击威胁,提出一种新的防御机制——StackSF.该机制不同于以往的方法,它是通过数据包标记和临界过滤器分析每个数据包的信息内容,过滤掉攻击数据包并检测出遭受欺骗的源IP地址.同时,还可以防御各种方式的IP欺骗的攻击.Today＇s Internet hosts are threatened by IP spoofing attacks and large scale Distributed Denial-of-Service （DDoS） attacks. We propose a new defense mechanism, StackSF, which unlike previous approaches, through Packet marking and threshold filter, StackSF can filter out attack packets and to detect spoofed source IP addresses, on a per-packet basis. It also could defend against many IP spoofing attacks at the same time.

关 键 词：StackSF DDOS IP地址欺骗 数据包标记 临界过滤器 路由器 预写 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]