基于自适应包标记的IP源追踪方案

IP Traceback Scheme Based on Adjusted Probabilistic Packet Marking

防御分布式拒绝服务(DDoS)攻击是当前网络攻击研究的重要课题,本文提出了一种DDoS攻击追踪方案的构想,在自适应包标记理论的基础上,提出了新的改进算法,该方案利用了TTL域和并提出了一种伸缩性的包标记策略,可以通过更少的数据包更快的定位出攻击源。同以往方法比较,该算法的灵活性好,并且误报率很低。经仿真实验证明该系统用较少的数据包即追踪IP源,最大限度的减少了攻击带来的损失。

Defending DDoS attack is the most important thing today in network research. The paper proposed one kind of DDoS attack defending solution based on adaptive packet marking scheme that can both detect and make use for DDoS attack source traceback.A new packet marking arithmetic is proposed by using TTL and flexibility packet marking which is more useful as fewer packets were needed compared with other schemes. Our scheme can also reduce the number of packets needed for attack path reconstruction and save the loss furthest according to the emulation mode.