DDoS攻击的IP追踪技术分析与比较研究  

Research on DDoS Attack IP Tracking Technology Analysis and Comparison

作　　者：蒋勇[1] 

机构地区：[1]江苏联合职业技术学院徐州财经分院,江苏徐州221008

出　　处：《计算机安全》2010年第12期59-62,共4页Network & Computer Security

摘　　要：IP追踪技术是检测和防御(分布式拒绝服务攻击)的重要手段,它的主要目的是想办法追踪到攻击数据包的源地址,弥补IP协议的不足。成熟的IP追踪技术可以有效抑制DDoS攻击的发生,还可以用于网络故障的诊断,对于减少数据包欺骗、净化互联网的安全环境将有很大的帮助。在引入DDoS攻击和IP追踪技术的概念的基础上,重点对现行IP追踪技术进行了分析,并从管理开销、网络开销、路由器开销、实现难易程度、事后处理能力、和兼容性等六个方面进行了比较研究。The IP tracing technology is the detection and the defense（distributional denial of service attack）,the important means whose main purpose tries to trace the attack data packet of source address to make up the insufficiency of the IP agreement.The mature IP tracing technology may suppress the DDoS attack effectively,also use in network fault diagnosis,reduce the data packet deceit and purify Internet＇s security environment.Based on introducing DDoS attack and IP tracking technology,focusing on current IP tracking technology,which are compared with from six aspects as the management expenses,the router,network,realizing the degree of difficulty,afterward processing ability and compatibility.

关 键 词：DDoS攻击I P追踪技术 分析 比较 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]