IPv6下确定性包标记追踪  

Deterministic Packet Marking Scheme in IPv6

作　　者：杨小红[1] 郑玮琨[1] 

机构地区：[1]深圳信息职业技术学院信息中心,广东深圳518172

出　　处：《深圳信息职业技术学院学报》2016年第3期37-41,共5页Journal of Shenzhen Institute of Information Technology

基　　金：市厅级资助项目(JCYJ20130401095947222);校级资助项目(lg201416)

摘　　要：IP追踪技术的动力源于识别IP包的攻击源,有利实时阻断隔离DDOS等网络攻击。目前的IP追踪方法大多是使用IPV4包头中很少使用的16位标示域保存经过的路由器信息。不适用于IPv6环境。本文阐明了IPv6环境下确定性包标记(DPM)算法的实现,此算法克服IPv4环境下DPM算法的两个典型缺陷,且容易实现,追踪效率高,具有单包追踪攻击源的功能。The motivation of IP traceback is to identify the true source of IP attack datagram and they can facilitate stopping on-going attacks. The current IP traceback technologies log the address of routers the packet passed by overloading the 16_bit IP Identification field used for fragmentation in the IPv4 header and they cannot be applied to IPv6. This paper elucidate the implementation of deterministic packet marking scheme on IPV6 network. This algorithm overcomes two typical defects of DPM algorithm in IPv4 environment, and is easy to implement and has high tracking efficiency, and has the function of single packet tracking attack source.

关 键 词：IPV6 DDOS IP追踪 确定性包标记 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]