基于跨区域追踪的确定包标记方案

Deterministic Packet Marking Scheme Based on Cross-regional Tracking

提出一种可以跨区域追踪分布式拒绝服务攻击来源的确定包标记方案,通过将基于中国余数定理的数据包标记算法与DPM-RD方案结合,实现更好的追踪性能。理论分析与仿真结果表明,在攻击数量大幅增长的情况下,该方案的误报率基本不变,与同类方案相比,只需更少的数据包即可在较短时间内重构攻击路径。

This paper proposes a novel Deterministic Packet Marking（DPM） scheme to trace the cross-regional source of Distributed Denial of Service（DDoS） attack. It adopts a packet marking algorithm inspired by CRT, and combines DPM-RD scheme to achieve better performance. Theoretical analysis and simulations reveal that the increasing number of attacks do not effect the false positive rate significantly, and compared with similar schemes, the scheme can reconstruct attack path in a comparatively short time with less packets.