一种基于协同机制的攻击源追踪方法  

Attack traceback method based on collaborative mechanism

作　　者：肖丹[1] 杨英杰[1] 施敏建[1] 

机构地区：[1]信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机应用》2007年第4期854-856,共3页journal of Computer Applications

基　　金：河南省自然基金资助项目(0611051300)

摘　　要：为了在分布式网络追踪系统中协调监控代理,及时共享多点采集的追踪数据合作定位网络攻击源,提出一种基于协同机制的攻击源追踪方法。该方法设计了自适应协同聚生追踪协议,通过在各监控代理间交互查询消息来实现监控代理间的协同追踪和攻击路径重构。实验分析表明,该方法提高了追踪信息的有效聚生和攻击源定位的准确性。In order to coordinate monitoring Agents with each other in tracing the source of network attack by sharing the tracing data, a traceback method based on collaborative mechanism was proposed. In this method an adaptlve-collaborative-aggregative tracing protocol was designed which could exchange simple and safe query messages reciprocally between monitoring Agents. By this means, distributed traceback system could achieve collaborative tracing and reconstruct attack path, Experimental results show that this method can make use of the tracing information effectively and improve the tracing precision.

关 键 词：网络攻击追踪 自适应协同聚生追踪协议 监控代理 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]