计算机网络追踪溯源技术现状及其评估初探

近年来随着计算机网络技术的发展，网络攻击事件愈发频繁，使网络安全受到了极大的威胁。追踪溯源技术能够追踪到攻击数据包的源头，定位攻击源，通过隔离或者其他手段限制网络攻击，保护网络安全。文中通过对网络追踪溯源技术的介绍，分析其面临的困难，对其发展现状进行概括，将追踪溯源技术分为三大类，对各种技术方法进行比较，初步提出追踪溯源技术的评估标准，抛砖引玉，共同探讨网络追踪溯源技术的发展。

Status quo and Evaluation of Traceback in Cyber-Network

With the development of computer and communications science, network-based intrusion has become a serious threat to today＇s highly networked information system. By using traceback technology, the source of network based intrusion, could be traced and detected, and isolated thus to protect the network. In this paper, the technical principles of tracing intrusion is described, the difficulty oftracebackandthe sort oftraceback techniques are discussed. Finally the guidelines for evaluating traceback technologies are given, and the development of this technique is explored.