基于IPv6改进的AMS-v6与APPM-v6方案研究  

Improved AMS-v6 and APPM-v6 scheme based on IPv6

作　　者：赵树枫[1] 陈世平[1] 

机构地区：[1]上海理工大学信息化办公室,上海200093

出　　处：《计算机工程与设计》2012年第1期56-60,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(60573142);上海市(第三期)重点学科基金项目(S30504)

摘　　要：包标记算法是IPv4下追踪DDOS攻击源最多的一种方法,但IPv6下实施困难。由此对IPv6下包标记方法的可行性进行了研究。为有效和安全的部署和实施数据包标记算法,利用IPv6新的特点,并结合标记流标签等字段,提出两种基于IPv6的改进方案AMS-v6和APPM-v6。在IPv4和IPv6协议下设计模型分别对两种算法进行实验对比,仿真实验结果表明了该算法在IPv6下数据包标记的有效性和适用性,并有效减少重构时间和所需数据包数量,提高重构攻击路径的速度。The packet marking algorithm is the most popular method for DDOS trackback under IPv4, but it is more difficult in the implementation of IPv6. So the feasibility of packet marking method is studied under IPv6. For the effective and safe deployment and implementation of packet marking algorithm, use of new features and IPv6 flow label field with tag, two IPv6-based improvement program AMS-v6 and APPM-v6 are proposed. Under IPv4 and IPv6 protocols to design the model, and by comparison of two algorithms, simulation results show the packet marking algorithm validity and applicability under IPv6, and effectively reduce the reconstruction time and decrease the number of packet the path reconstruction needs, and increase the speed of path reconstruction,

关 键 词：IP追踪 拒绝服务攻击 分布式拒绝服务 IPV6协议 概率包标记 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]