基于自适应包标记的DDoS攻击源的定位研究  

Research on locating of DDoS attackers based on adaptive parket marking

作　　者：刘渊[1] 朱晓建[1] 陈彦[1] 

机构地区：[1]江南大学信息工程学院,江苏无锡214122

出　　处：《计算机工程与设计》2008年第10期2477-2478,2482,共3页Computer Engineering and Design

基　　金：国防基础研究基金项目(A1420061266)

摘　　要：防御分布式拒绝服务攻击是当前网络安全中最难解决的问题之一。在自适应包标记的基础上,提出了有效计算攻击图各个路由器的本地发包率的方法,进一步提出了受害者重构攻击路径和定位攻击源的方法。受害者只要利用收集到的数据包就能更快更准的定位攻击源。Defending against distributed denial of service attacks is one of the hardest security problems on the Intemet today. Based on the adaptive parket marking scheme, a method is proposed that can effectively compute the local traffic rate of each router in the attack graph. Furthermore, a method is presented which victims can reconstruct the attacking paths and locate the attackers. Victims can locate attackers more quickly and more truly only using the collected packets.

关 键 词：攻击源定位 IP追踪 拒绝服务攻击 分布式拒绝服务攻击 自适应包标记 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]