基于动态概率包标记的IP追踪方法  

IP Traceback Method Based on Dynamic Probabilistic Packet Marking

作　　者：冯波[1] 郭帆[1] 余敏[1] 

机构地区：[1]江西师范大学计算机信息工程学院,南昌330022

出　　处：《计算机工程》2010年第2期152-155,共4页Computer Engineering

基　　金：国家"973"计划面上基金资助项目"信息处理和网络资源优化的基础研究"(2007CB316505);江西省教育厅科技计划基金资助项目(2006070)

摘　　要：目前多数概率包标记都存在遗失标记信息、重构困难、准确率低等现象。针对该问题,提出一种基于动态概率包标记的IP追踪方法。采用动态标记概率代替原有的固定标记概率用于判断是否对数据包进行标记,应用更合适的概率对其标记。实验结果表明,该方法能解决标记覆盖问题,降低样本依赖性,提高准确率。Most of the Probability of Packet Marking（PPM） exist many problems such as the lost of marking information,the difficulties to reconstruct attack path,low accuracy and so on. Aiming this problem,this paper presents an IP traceback method based on Dynamic Probabilistic Packet Marking（DPPM）,to further improve the effectiveness of PPM. Instead of using a fixed marking probability,this paper proposes to judge whether the packet has been marked or not then choose a proper marking probability. Experimental result shows that it can solve most of the problems in PPM method,reduce sample dependence and increase the accuracy.

关 键 词：IP追踪 分布式拒绝服务攻击 概率包标记 网络安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]