基于DoS攻击的随机数据包标记源跟踪算法

针对互联网上日益猖獗的拒绝服务攻击(DoS),对传统的随机数据包标记源跟踪算法原理及其实现过程进行了深入研究。通过分析该算法性能缺陷,运用散列消息鉴别码机制和一次性口令机制,提出一种新的攻击源返回跟踪算法HPPM。通过测试其性能指标,说明该算法改进了传统随机数据包算法的性能,提高了返回跟踪DoS攻击的效率和准确性。

A Probabilistic Packet Marking Traceback Algorithm based on DoS Attacks

Focusing on the increasingly malicious Denial- of- Service attacks on the Internet, this paper conducts an in- depth study of the principle of the traditional Probabilistic- Packet- Marking algorithm (PPM). After analyzing the performance drawbacks of PPM, it brings forward a new traceback algorithm HPPM, based on Keyed- Hash Message Authentication Code (HMAC) and One- Time Pass- word strategy (OTP), which is demonstrated to be more efficient and accurate than the traditional PPM algorithm in tracing back the sources of a Dos attack.