多源网络攻击追踪溯源技术研究  

Exploration on Attribution of Multi-source Network Attack

作　　者：郝尧[1] 陈周国[1] 蒲石[1] 黄宸[1] 

机构地区：[1]保密通信重点实验室,四川成都610041

出　　处：《通信技术》2013年第12期77-81,共5页Communications Technology

摘　　要：网络攻击追踪溯源在定位攻击源、阻止或抑制网络攻击、提供法律举证、威慑攻击者等方面具有非常积极的意义。近年来,学术界对此开展了大量的研究,并提出了多种追踪溯源技术体制。分析了在大规模网络环境下网络攻击追踪溯源所面临的问题,以及当前主要技术体制的优缺点和适用性,提出了融合多种追踪溯源机制的多源追踪溯源技术思路,设计了基于信息融合的扩展性强、易于部署建设的MSNAA网络攻击追踪溯源系统架构。The attributing technology for network attack plays a key role in locating attack source, stopping or checking attack, providing lawful testimony, and deterring attackers. In this paper, the difficulties for network attack attribution in large-scale network are discussed, and the technical principles and technical characteristics of present attack-tracing approaches are described. Meanwhile the multi-source attributing approach in combination of multiple attributing mechanisms is proposed, and the information fusion-based multi-source network attack attribution architecture of strong scalability and easy deployment also de- signed.

关 键 词：网络安全 网络攻击追踪溯源 IP追踪 信息融合 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]