一种基于路由器的伪装IP回溯方法

A Router-Based Method of IP Traceback

在因特网中,攻击者能伪造其IP地址。本文提出了一种新的针对洪泛型攻击(flooding attack)的IP回溯技术——PPL。在该方法中,路由器以一定的概率存储转发分组的信息,然后利用这些信息,从被攻击者开始回溯攻击分组到其源,对网络攻击者起到威慑的作用,仿真实验证明,新方案在回溯洪泛型攻击时,其性能优于文[2]中的方案。

This paper descriebes a technique for tracing anonymous packet flooding attacks in the Internet back toward their source. In our approach. forwarding nodes (such as routers) log information with probabilistic about traversing packets on the Internet and then use the log data to trace each packet from, its final destination back to its source,hop by hop- The simulation test proves that the performance of PPL is better than method in literature \_2~\-