摘要
为了改进概率包标记方案的性能,提出两个能追踪大规模拒绝服务攻击可变概率包标记方案。采用可变概率标记,可识别和排除攻击者虚假标记信息。通过在路由器中记录IP地址发送状态,对包分片进行有序发送,降低了受害者重构路径时所需接收包的数量。
The paper proposes two schemes which enhances the performance of PPM in following aspects. Because of ingenious design, the schemes can be used to tackle large-scale DDoS. And due to adopting varational probabilistic packet marking, they can recognize and eliminate spoofed marking inscribed by the attacker intentionally. By recording the state of IP address transmission in router and transmiting the packets fragments in order, the schemes can significantly reduce the number of packets required for path reconstruction.
出处
《计算机工程》
CAS
CSCD
北大核心
2008年第7期131-133,136,共4页
Computer Engineering
关键词
IP包追踪
网络安全
包标记
IP traceback
network security
packet marking
