一种DDoS攻击追踪策略及应用

A Traceback Tactic of DDoS Attack and Its Application

目前,为防范DDoS攻击,研究者们提出了多种解决方案,如链路测试法、ICMP追踪法、日志记录法、概率包标记法等,但都需要大量的数据包重构攻击路径。通过分析DDoS攻击的基本原理和目前IP追踪的技术,对一种新的基于哈夫曼编码的IP追踪策略进行了研究,并将此策略应用于局部网络,达到了很好的抵御DDoS攻击的效果。

At present, the researchers have proposed several schemes to keep away DDoS attack, for exampie, Ingress Filtering, ICMP traceback, Logging and Probabilities Packet Marking. But most of these schemes require a large number of packets to conduct the traceback process. This paper makes a study of a new IP traceback tactic using Huffman codes on the basis of the analysis of basic principles of DDoS attack and IP traceback techniques which have been proposed. And the tactic is applied to local network and proves effective in resisting DDoS attack.