IP追踪中攻击路径重构问题的随机模型

A Stochastic Model of Attack Path Reconstruction Problem for IP Traceback

建立了IP追踪中攻击路径重构问题的理想模型和扩展模型.基于概率包标记方法,将攻击路径的重构过程表述为一个收敛的随机过程,推导出收敛时间与路径长度、标记概率之间的数学定量关系,得出达到最小收敛时间需要满足的数学条件.实验结果表明,该模型理论值与实验结果一致,为深入研究概率包标记方法提供了理论依据.

An ideal model and its extended model of attack path reconstruction for IP traceback were established.Based on the method of probabilistic packet marking,attack path reconstructing process could be described as a convergent stochastic process,and the quantitative relationship of convergence time,path length and marking probability was presented.The required condition to obtain minimum convergence time was derived.The simulation results show that experimental values coincide with the theory results very well.The model provides a theoretic foundation for further research work on probabilistic packet marking approach.