可控网络攻击源追踪技术研究

提出一种新的基于网络入侵检测的攻击源追踪方法．给出了系统模型，深入分析了攻击链路集合构造和攻击链路上下游关系的确定方法，在此基础上提出攻击路径构造算法．实验结果表明，该系统能够在可控网络环境下实时、准确地对攻击源进行追踪．和已有方法相比，新的方法在实用性、追踪的准确性、系统的可扩展性等方面有明显提高．

Research on Intrusion Traceback in Controlled Network Environment

In this paper, an intrusion traceback mechanism based on network intrusion detection is proposed. A system model is given and the scheme of constructing an attack link set and ordering the attack links is discussed in detail, and then an algorithm of constructing attack path is put forword. Experiments show that the system can trace back and locate the attack source accurately and real-timely under a controlled environment. Compared with the other existing systems, this system has remarkable improvement of availability, accuracy and scalability.