基于可变概率的快速IP包追踪方案  

Fast IP Traceback Schemes Based on Variational Probability

作　　者：陆峰[1] 郑康锋[1] 钮心忻[1] 杨义先[1] 

机构地区：[1]北京邮电大学网络与交换国家重点实验室信息安全中心,北京100876

出　　处：《计算机工程》2008年第7期131-133,136,共4页Computer Engineering

摘　　要：为了改进概率包标记方案的性能,提出两个能追踪大规模拒绝服务攻击可变概率包标记方案。采用可变概率标记,可识别和排除攻击者虚假标记信息。通过在路由器中记录IP地址发送状态,对包分片进行有序发送,降低了受害者重构路径时所需接收包的数量。The paper proposes two schemes which enhances the performance of PPM in following aspects. Because of ingenious design, the schemes can be used to tackle large-scale DDoS. And due to adopting varational probabilistic packet marking, they can recognize and eliminate spoofed marking inscribed by the attacker intentionally. By recording the state of IP address transmission in router and transmiting the packets fragments in order, the schemes can significantly reduce the number of packets required for path reconstruction.

关 键 词：IP包追踪 网络安全 包标记 

分 类 号：TP18[自动化与计算机技术—控制理论与控制工程]