IP追踪技术压缩边分片采样算法的改进  

Improvement of Compressed Edge Fragment Sampling Algorithm for IP Traceback

作　　者：刘丽[1] 黄芳芳[1] 

机构地区：[1]北京科技大学信息工程学院,北京100083

出　　处：《微电子学与计算机》2010年第12期78-81,共4页Microelectronics & Computer

基　　金：国家自然科学基金项目(60873193)

摘　　要：IP追踪技术是防御拒绝服务攻击(DoS)的重要措施.文中针对用于IP追踪的压缩边分片采样算法(CEFS)存在的不足,提出了标注分片自适应概率包标记算法(LFAPPM).该算法通过扩大标记空间和采用自适应概率的方法,减少了重构路径所需包数,并通过给分片加标注,减少了重构路径的计算量和误报数,而且通过初始化没被边界路由器标记的包标记空间,加强了抗干扰性.与其他算法进行比较,LFAPPM算法各种性能指标较优.IP traceback is an important measure to defend against Denial of Service（DoS） attack.Based on Compressed Edge Fragment Sampling algorithm（CEFS） for IP traceback,a new algorithm is proposed,called Lable fragment adaptive probability packet marking（LFAPPM）.By enlarging marking space and using adaptive probability for packet marking,the LFAPPM algorithm reduces the number of packets needed for attack path reconstruction.Moreover,the algorithm reduces computation and false positive number in reconstructing multiple attack path by labeling fragment.Then the algorithm strengthens the anti-interference capability by initializing marking space of packets which are not marked by Boder Router.Compared with other algorithms,the LFAPPM algorithm has better performance.

关 键 词：拒绝服务攻击 IP追踪 压缩边分片采样算法 标注分片自适应概率包标记算法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]