IP追踪中的包标记算法  

Research on the Packet Marking Algorithm for IP Trackback

作　　者：吴蓉晖[1] 吴岚[1] 

机构地区：[1]湖南大学信息科学与工程学院,湖南长沙410082

出　　处：《湖南大学学报（自然科学版）》2011年第6期75-78,共4页Journal of Hunan University:Natural Sciences

基　　金：国家自然科学基金资助项目(60803130)

摘　　要：针对基本包标记算法效率低的问题,提出了一种改进算法.通过优化传统的路径信息编码方式,对其标记过程和重构过程作了相应的修改,使受害者可以更快地重构出攻击路径.仿真实验结果表明:该算法能够有效地减少组合次数,提高追踪效率,并且大大降低了误报率.在实际的拒绝服务攻击中能够使受害者更快更准确地追踪到攻击者,从而减少损失.To solve the problem of low efficiency of probabilistic packet marking,an improved algorithm was proposed.This new algorithm optimizes the encoding of path information and modifies the marking and reconstruction process,so that victims can quickly reconstruct the attack path.Simulation results have shown that the new algorithm can effectively reduce combination frequency,improve tracking efficiency and greatly reduce the false positives rate.In the actual denial of service attack,victims can track the attacker faster and more accurately,thus minimizing the damage.

关 键 词：IP追踪 网络安全 包标记 拒绝服务攻击 分布式拒绝服务攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]