基于分布式反射拒绝服务攻击的包标记技术的研究  

New research on Packet marking for DRDOS attacks

作　　者：余鹏[1] 杨木清[2] 

机构地区：[1]中南民族大学计算机科学学院,湖北武汉430074 [2]中南民族大学网络信息中心,湖北武汉430074

出　　处：《计算机安全》2008年第4期21-23,31,共4页Network & Computer Security

摘　　要：分布式拒绝服务攻击是当今网络安全领域最难防御的攻击之一。在众多的解决方法中,数据包标记无疑成为最主动和最有效的方法。该文通过提出一种结合自适应包标记和代数编码包标记两者特点的新型分布式拒绝服务攻击包标记方法来实现标记过程,并通过对攻击源发出的数据包进行分析重组和IP回溯,从而达到重构攻击树,追踪攻击源头的目的。DRDOS is one of the toughest defendable attack in the field of Internet Security. It’s not deny that packet marking scheme is the best and the most effective method in solving it. And this paper presents a new DRDOS packet marking method which is combined with AdaptivePacketMarking and CodePacketMarking to realize marking process. Meanwhile, it depends on the packets which comes from the attack source to analysis and make a IP traceback, so that it can reconstruct the attack-tree, as well as make tracks for the attack source.

关 键 词：自适应包标记 代数编码包标记 分布式拒绝服务攻击包标记 IP回溯 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] S865.24[自动化与计算机技术—计算机科学与技术]