基于数据包缓存的伪IP地址实时追踪技术的研究  

Research on Real-time Traceback Scheme for Forged IP Address Based on Data Packets Buffer Storage

作　　者：杨云江[1] 高鸿峰[1] 邓周灰[1] 於斌[1] 郑宗兴[1] 

机构地区：[1]贵州大学信息化管理中心,贵州贵阳550025

出　　处：《贵州大学学报（自然科学版）》2013年第4期66-69,共4页Journal of Guizhou University:Natural Sciences

基　　金：贵州省科学技术基金(黔科合J字[2009]2116号)

摘　　要：当前,非法攻击者在实施网络攻击时,通常会采用伪IP地址来转发数据包。对于这一类信源终端,目前还没有有效、实时的追踪和定位方法。本文分析了几种典型的IP地址追踪方法,指出其存在实时性、依赖性等缺点,提出了一种对IP地址转换之前的"跳板机"的原始数据包缓存进行分析,从而获取真实IP地址的方法,具有较好的实时性与自主性。At present, illegal attackers, when attacking, usually transmit data packets by using forged IP addres- ses. So far, there have been no effective methods to do realtime tracing and locating of such kind of the terminal of message senders. This paper analyzes several typical IP address tracing method, pointing out the existence of real-time, dependence and other shortcomings, puts forward a kind of IP address before the conversion of ＂ spri- ngboard computers ＂ of the original packet buffer analysis method, in order to obtain the real IP address, with real-time and better independence.

关 键 词：网络安全 终端定位 伪IP地址 IP追踪 缓存访问 

分 类 号：TP393.081[自动化与计算机技术—计算机应用技术]