一种基于入口地址标记的DoS攻击防御模型

An Anti-DoS Attack Model Based on Ingress Address Marking

对因特网上的DoS攻击进行了分类,分析讨论了已有的各种防范技术,提出了新的在AS的入口路由器端进行地址标记的IAM模型,使受害主机能通过分析攻击数据报中的地址标记信息,直接获取攻击入口路由器地址。随后可通知该路由器采取拦截或过滤等防范措施。

The paper gives a classification of DoS attacks on Internet. The techniques to defeat DoS are analyzed. It presents a new scheme, IAM, with which can embed IP address into the packet at ingress router. Thus victim can recover the address of the ingress router by analyzing attack packets and tell the ingress router to do interceptions or filtering to restrain DoS attacks.