The technique of IP traceback may effectively block DOS (Denial Of Service) and meet the requirement of the computer forensic, but its accuracy depends upon that condition that each node in the Internet must support I...The technique of IP traceback may effectively block DOS (Denial Of Service) and meet the requirement of the computer forensic, but its accuracy depends upon that condition that each node in the Internet must support IP packet marking or detected agents. So far, this requirement is not satisfied. On the basis of traditional traceroute,this paper investigates the efficiency of discovering path methods from aspects of the size and order of detecting packets, and the length of paths.It points out that the size of padding in probed packets has a slight effect on discovering latency, and the latency with the method of bulk sending receiving is much smaller than one with the traditional traceroute. Moreover, the loss rate of packets with the technique of TTL (Time To Live) which increases monotonously is less than that with the technique of TTL which decreases monotonously. Lastly,OS (Operating System) passive fingerprint is used as heuristic to predict the length of the discovered path so as to reduce disturbance in network traffic.展开更多
IP定位是通过网络设备的IP地址推断其所在真实地理位置的一项关键技术。现有的研究主要针对端IP的定位,关于路由IP地理定位研究较少,且这些方法选取的网络特征较为单一,加上过于依赖探测节点和地标节点的位置和数量,导致路由定位结果理...IP定位是通过网络设备的IP地址推断其所在真实地理位置的一项关键技术。现有的研究主要针对端IP的定位,关于路由IP地理定位研究较少,且这些方法选取的网络特征较为单一,加上过于依赖探测节点和地标节点的位置和数量,导致路由定位结果理想化,难以应用到实际工作中。基于这些现状,提出了一种基于谱聚类的路由IP地理定位(Spectral Clustering Based Router IP Geolocation,SCRG)方法。该方法对目标IP进行网络路径探测,获取较为完整的网络路由拓扑信息;采用谱聚类算法对路由IP进行聚类,并将路径上的时延信息纳入到算法中,作为IP节点之间的距离;利用测量得到的自治域系统(Autonomous System,AS)路径信息对聚类簇做进一步划分与合并,并加入簇内投票冲突解决机制,尽可能避免出现路由环路的情况,将投票所在城市作为簇内路由IP的定位结果。对中国广东省IP的探测实验表明,该方法能够有效提高路由IP地理定位的正确率,降低错误投票对定位结果带来的影响,实现快速高效的大规模路由IP城市级地理定位。展开更多
基于IP路径信息,从分析AS边界的一般模型入手,引入了AS边界序列的概念,提出了一系列AS边界判别规则,这些规则揭示了IP路径信息中所隐藏的AS边界划分规律.由此提出了一种基于规则的AS边界判别方法JBR(judging border by rules).实验结果...基于IP路径信息,从分析AS边界的一般模型入手,引入了AS边界序列的概念,提出了一系列AS边界判别规则,这些规则揭示了IP路径信息中所隐藏的AS边界划分规律.由此提出了一种基于规则的AS边界判别方法JBR(judging border by rules).实验结果表明,与基于别名解析的判别方法JBA(judging border by alias)相比,JBR具有较快的判别速度,在边界地址及边界链路的判断上都具有优势.展开更多
文摘The technique of IP traceback may effectively block DOS (Denial Of Service) and meet the requirement of the computer forensic, but its accuracy depends upon that condition that each node in the Internet must support IP packet marking or detected agents. So far, this requirement is not satisfied. On the basis of traditional traceroute,this paper investigates the efficiency of discovering path methods from aspects of the size and order of detecting packets, and the length of paths.It points out that the size of padding in probed packets has a slight effect on discovering latency, and the latency with the method of bulk sending receiving is much smaller than one with the traditional traceroute. Moreover, the loss rate of packets with the technique of TTL (Time To Live) which increases monotonously is less than that with the technique of TTL which decreases monotonously. Lastly,OS (Operating System) passive fingerprint is used as heuristic to predict the length of the discovered path so as to reduce disturbance in network traffic.
文摘IP定位是通过网络设备的IP地址推断其所在真实地理位置的一项关键技术。现有的研究主要针对端IP的定位,关于路由IP地理定位研究较少,且这些方法选取的网络特征较为单一,加上过于依赖探测节点和地标节点的位置和数量,导致路由定位结果理想化,难以应用到实际工作中。基于这些现状,提出了一种基于谱聚类的路由IP地理定位(Spectral Clustering Based Router IP Geolocation,SCRG)方法。该方法对目标IP进行网络路径探测,获取较为完整的网络路由拓扑信息;采用谱聚类算法对路由IP进行聚类,并将路径上的时延信息纳入到算法中,作为IP节点之间的距离;利用测量得到的自治域系统(Autonomous System,AS)路径信息对聚类簇做进一步划分与合并,并加入簇内投票冲突解决机制,尽可能避免出现路由环路的情况,将投票所在城市作为簇内路由IP的定位结果。对中国广东省IP的探测实验表明,该方法能够有效提高路由IP地理定位的正确率,降低错误投票对定位结果带来的影响,实现快速高效的大规模路由IP城市级地理定位。
文摘基于IP路径信息,从分析AS边界的一般模型入手,引入了AS边界序列的概念,提出了一系列AS边界判别规则,这些规则揭示了IP路径信息中所隐藏的AS边界划分规律.由此提出了一种基于规则的AS边界判别方法JBR(judging border by rules).实验结果表明,与基于别名解析的判别方法JBA(judging border by alias)相比,JBR具有较快的判别速度,在边界地址及边界链路的判断上都具有优势.
