基于IP欺骗攻击的状态分析法研究  

Analysis of the state under IP spoofing

作　　者：陈晓苏[1] 李永辉[1] 肖道举[1] 

机构地区：[1]华中科技大学计算机科学与技术学院

出　　处：《华中科技大学学报（自然科学版）》2003年第5期3-5,共3页Journal of Huazhong University of Science and Technology(Natural Science Edition)

摘　　要：提出了一种能够在网络中检测并防范IP欺骗攻击的方法 .通过获取网络结点的工作状态 ,分析网络中出现的异常活动 ,给出了因攻击而引起的网络状态的迁移过程 .通过预测分析 ,及时检测出已经存在的IP欺骗攻击 ;通过回溯分析 ,试图找到发起攻击的攻击者 .将状态分析法运用于入侵检测 ,可增强网络抵御IP欺骗攻击的能力 .A method was proposed for the detection of IP spoofing and resistance to it. By obtaining the system data of the host and the abnormal activity emerging in the network, the process of the network-state transition caused by the attack was analyzed. Based on the prediction analysis, the existing IP spoofing could be detected. According to the trace analysis, the real attacker could be found. If this idea is applied in the intrusion detection, the network resistibility under IP spoofing will be reinforced.

关 键 词：IP欺骗 入侵检测 状态转移图 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]