基于合作过滤机制的ICMP回溯DDoS攻击源方法

An ICMP Traceback Method of DDoS Attack Source Based on Cooperative Filtering Mechanism

提出一种改进的ICMP回溯方法。此方法是基于合作过滤机制的,采用合作过滤机制能够使产生的ICMP回溯包更有效并在尽可能靠近DDoS攻击源的地方过滤攻击包和保护合法包,改进后的ICMP方法对引发ITrace包的IP包从靠近攻击源的地方同步跟踪到受害者,提高了重构攻击路径的速度和准确性。

Presents an improved ICMP traceback method based on cooperative filtering mechanism. The cooperative filtering mechanism can generate ICMP traceback packets more efficiently and feltrate attack packets and protect legal packets the location of DDoS attack source as closely as possible. The improved ICMP traceback method tracks victim synchronously from the location near the attack source by the IP packets which evokes ITrace packets,and it enhances the speed and accuracy of reconstructive traceback path.