一种新的基于认证的可变概率包标记方法  

A New Dynamic Probabilistic Packet Marking Algorithm Based on HMAC

作　　者：刘风华[1,2] 秦琳琳[2] 

机构地区：[1]徐州工程学院,江苏徐州221008 [2]中国矿业大学信电学院,江苏徐州221116

出　　处：《徐州工程学院学报（自然科学版）》2012年第2期73-78,共6页Journal of Xuzhou Institute of Technology(Natural Sciences Edition)

基　　金：徐州工程学院科研项目(XKY2009112)

摘　　要：在基本概率包标记的基础上,提出了一种新的攻击源追踪方案.该方案采用自适应概率标记数据包,在标记过程中采用了认证的方式,避免了数据包重复标记的出现,并增加了标注来存放头节点IP地址的Hash值,在路径重构时根据距离和标注把重构数据包划分为不同的子集.改进方案重构攻击路径时不需要网络拓扑信息,理论和实验表明该方法在收敛性、误报数和安全性方面都有很大的改进.An improved attack source tracing scheme based on the basic package marking is proposed, which uses adaptive probability marking packet, and uses authenticated method in the marking process, avoids duplication of packets marking and adds label to hold the start node＇s hash value of IP address, the packets are divided into different subsets based on distance and label when doing path reconstruction. The improved scheme does not require the information of network topology, and its convergence, number of false alarms, and security have been greatly improved through theory analysis and simulation experiments.

关 键 词：分布式拒绝服务攻击 IP追踪 概率包标记 自适应概率标记 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]