网络攻击源追踪技术的分类和展望

Classification of network attack source tracing technologies

网络攻击源追踪技术在实时阻断或隔离攻击、追究相关责任、提供法律举证、威慑攻击者等方面具有非常积极的意义。该文对现有的多种网络攻击源追踪技术进行了系统分类,归纳比较了各种方法的优缺点,并探讨了网络攻击源追踪的进一步研究方向,包括建立量化的评估指标体系、建立网络攻击源追踪的理论模型、考虑诸如多播、移动性、IPV6、数据加密、结合管理上的特点解决网络攻击源追踪等问题。

Network attack source tracing plays a key role in stopping on-going attacks, establishing liability, enabling prosecution of attackers, and deterring attackers. This paper classifies some promising traceback approaches and their technical characteristics. Each approach is evaluated in terms of its advantages and disadvantages. Finally, future develops in network attack tracing technologies are discussed including quantitative evaluation metrics, theoretical models, multicast systems, mobility abilities, ipv6 protocol, data encryption, and administration problems.