一种准确快速定位的节点包标记算法  

Kind of accurate and fast location node packet marking schemes

作　　者：刘渊[1,2] 李秀珍[1] 陈彦[1] 

机构地区：[1]江南大学信息工程学院,江苏无锡214122 [2]南京理工大学计算机学院,南京210093

出　　处：《计算机应用研究》2008年第12期3739-3740,3746,共3页Application Research of Computers

基　　金：国防预研基金资助项目(A1420061266)

摘　　要：目前对于拒绝服务攻击(DoS)和分布式拒绝服务攻击(DDoS),概率包标记(PPM)和高级包标记方案(AMS)是有效的IP追踪技术,但其存在很大的误报率,不能快速追踪到攻击者。在AMS的基础上改进了包标记方法,合理假设在一个自治系统中,采用节点标记方法,经理论分析能降低误报率;经实验验证用较少的数据包就可以快速准确地定位到攻击者。Probabilistic packet marking and advanced marking schemes are effective technique for IP traceback. However, they use the edge sampling method which exists the large false positive rate and can＇ t fast trace the attacker. Based on reasonable hypothesis, in a large autonomous system, this paper improved AMS with node sampling, which could reduce the false positive rate by theoretical analysis, could quickly and accurately locate the attacker by experimental verification.

关 键 词：分布式拒绝服务攻击 概率包标记 高级包标记 节点包标记 IP追踪 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]