基于扩展头随机标记的IPv6攻击源追踪方案

针对IPv4网络环境下的随机包标记法不能直接应用于IPv6的问题，依据IPv6自身的特点提出了一种基于扩展报头随机标记的IPv6攻击源追踪方案。对IPv6报头进行分析研究，选取了合适的标记区域及编码格式，对PMTU算法进行了修改以更好地满足追踪的需要，采用攻击树生成算法重构攻击路径。理论分析与仿真实验结果表明，该方案能够有效地重构攻击路径，实现对IPv6攻击源的追踪。

IPv6 attack source traceback scheme based on extension header probabilistic marking

The probabilistic packet marking for IPv4 networks could not applied to IPv6 without any change.This paper proposed an IPv6 attack source traceback scheme based on extension header probabilistic marking according to the features of IPv6.It analysed the IPv6 header, selected the appropriate marking areas and gave the specification of coding,made some changes to PMTU algorithm so as to satisfy the demand of traceback,adopted the algorithm of generating attack tree to reconstruct the attack paths.Theoretic analysis and simulation results prove that it can reconstruct the attack paths effectively,realize the aim of IPv6 attack source traceback.