基于动态概率的多条标记IP追踪方法  

A Multi-Packet Marking Method for IP Traceback based on DPPM

作　　者：刘红[1] 陈秀真[1] 严庆蕾[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《信息安全与通信保密》2013年第3期66-69,共4页Information Security and Communications Privacy

基　　金：国家自然科学基金资助;项目名称"基于彩色空间特征分析的数字图像被动防伪鉴定研究"(批准号:61071152)

摘　　要：针对动态概率包标记方法中标记空间受限问题,在现有动态概率算法的基础上,将动态概率包标记与多条标记思想相结合,设计了一种新的多条标记方法:n倍多条标记方法来完成IP追踪过程,并设计了相应模拟实验来测试该方法。实验结果表明,该方法完成IP追踪所需攻击包数是现有动态概率包标记方法的1/n。实验测试表明,n倍多条标记方法具备良好的可行性,可有效追踪ICMP洪水攻击。Aiming at the problem of limited marking space existing in DPPM, a new packet marking method known as n-Muhi-DPPM is proposed, and this method, in combination of dynamic probabilistic algorithm and multi- tags marking technology based on DPPM, implements IP traceback. Then a simulation experiment is designed to test n-Muhi-DPPM, and the experiment results indicate that the number of packets needed for implementing IP traceback under n-Multi-DPPM is 1/n of the number of packets under DPPM. Thus, n-Muhi-DPPM is of good feasibility and could trace ICMP flood attack efficiently.

关 键 词：动态概率包标记 n倍多条标记 IP追踪 ICMP洪水 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]