基于扩展头随机标记的IPv6攻击源追踪方案  

IPv6 attack source traceback scheme based on extension header probabilistic marking

作　　者：杨俊[1] 王振兴[1] 郭浩然[1] 

机构地区：[1]解放军信息工程大学信息工程学院,郑州450002

出　　处：《计算机应用研究》2010年第6期2335-2337,2340,共4页Application Research of Computers

摘　　要：针对IPv4网络环境下的随机包标记法不能直接应用于IPv6的问题,依据IPv6自身的特点提出了一种基于扩展报头随机标记的IPv6攻击源追踪方案。对IPv6报头进行分析研究,选取了合适的标记区域及编码格式,对PMTU算法进行了修改以更好地满足追踪的需要,采用攻击树生成算法重构攻击路径。理论分析与仿真实验结果表明,该方案能够有效地重构攻击路径,实现对IPv6攻击源的追踪。The probabilistic packet marking for IPv4 networks could not applied to IPv6 without any change.This paper proposed an IPv6 attack source traceback scheme based on extension header probabilistic marking according to the features of IPv6.It analysed the IPv6 header, selected the appropriate marking areas and gave the specification of coding,made some changes to PMTU algorithm so as to satisfy the demand of traceback,adopted the algorithm of generating attack tree to reconstruct the attack paths.Theoretic analysis and simulation results prove that it can reconstruct the attack paths effectively,realize the aim of IPv6 attack source traceback.

关 键 词：网络追踪 IPV6 随机包标记 扩展包头 分布式拒绝服务攻击 

分 类 号：TP393.03[自动化与计算机技术—计算机应用技术]