基于非重复包标记的IP追踪研究  

IP traceback based on unrepeatable packet marking scheme

作　　者：朱晓建[1] 刘渊[1] 李秀珍[1] 

机构地区：[1]江南大学信息工程学院,江苏无锡214122

出　　处：《计算机应用》2007年第11期2694-2695,2698,共3页journal of Computer Applications

基　　金：国防基础研究基金项目(A1420061266)

摘　　要：防御分布式拒绝服务攻击是当前网络安全中最难解决的问题之一。在基本包标记的基础上,提出了非重复包标记的方法,并运用自适应策略分析标记概率,有效地减少了路径重构所需的数据包数和路由器的标记工作量,提高了路径重构的效率。Defending against distributed denial of service attacks is one of the hardest security problems on Intemet today. Based on the probabilistic packet marking scheme, a new unrepeatable probabilistic packet marking scheme was proposed and the adaptive strategy was applied to analyze marking probability. The results show that the scheme can effectively reduce the number of the packets needed for path reconstruction and the marking workload of routers, thus this scheme improves the efficiency of path reconstruction.

关 键 词：包标记 IP追踪 拒绝服务攻击 分布式拒绝服务攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]