| 基于扩展首部hop-by-hop的IPv6包标记算法研究 |
| |
| 引用本文： | 李明珍,蒋 华,王 鑫. 基于扩展首部hop-by-hop的IPv6包标记算法研究[J]. 计算机应用研究, 2012, 29(6): 2313-2316 |
| |
| 作者姓名： | 李明珍 蒋 华 王 鑫 |
| |
| 作者单位： | 桂林电子科技大学 计算机科学与工程学院,广西 桂林,541004 |
| |
| 基金项目： | 广西壮族自治区自然科学基金资助项目（0991071） |
| |
| 摘 要： | 针对如何将IPv4环境下的包标记技术应用于IPv6的问题,结合已有的算法思想提出一种改进的算法,该算法采取固定概率将路由信息标记到扩展首部hop-by-hop,隧道模式下节点标记数据包时增加一个复制操作,扩大标记算法的适用范围;利用ESP的加密算法有选择地对标记消息进行加密。实验结果表明,新方案的兼容性和安全性得到了极大的提高。
|
| 关 键 词： | IPv6 分布式拒绝服务 IP追踪 包标记 扩展首部 hop-by-hop 加密 |
IPv6 packet marking algorithm research based on extension header hop-by-hop |
| |
| LI Ming-zhen,JIANG Hu,WANG Xin. IPv6 packet marking algorithm research based on extension header hop-by-hop[J]. Application Research of Computers, 2012, 29(6): 2313-2316 |
| |
| Authors: | LI Ming-zhen JIANG Hu WANG Xin |
| |
| Affiliation: | School of Computer Science & Engineering, Guilin University of Electronic Technology, Guilin Guangxi 541004, China |
| |
| Abstract: | Aiming at how to solve the problem of IPv4 packet marking applying to IPv6 packet marking, this paper proposed an improved algorithm. The improved algorithm used deterministic probability to mark route information into extension header hop-by-hop. In tunnel mode, the improved algorithm added a copy operation to expand the scope of application of the algorithm. It used the encryption algorithm of ESP electively to encrypt marking information. Experiment shows that the compatibility and security of the new scheme is greatly improved. |
| |
| Keywords: | IPv6 DDoS IP traceback packet marking extension header hop-by-hop encryption |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用研究》浏览原始摘要信息 |
|
点击此处可从《计算机应用研究》下载全文 |
