基于哈希和流量分析的IP回溯

由于IP数据包的源地址可以任意伪造,因此在回溯DoS攻击数据包走过的真实路径时是很困难的。基于哈希和流量分析的方法(HashandTrafficAnalysisbasedScheme,简记为HTAS)使得路由器不需太多的存储空间便能长时间地记录下经过它的可疑数据流,受害者据此可以在遭到DoS攻击时或以后进行回溯。该文详细阐述了该方法的工作模型,并对其性能进行了分析。

Hash and Traffic Analysis Based IP Traceback

Because IP source address can be spoofed at will,it i s very difficult to trace the true path that packets of DoS attack travel.This pa per presents a scheme based on hash and traffic analysis,short for HTAS.With the scheme ,the router can record the suspectable traffics long,but does not need too much memory.When or after the victim is attacked by DoS,it can traceb ack the attack inquiring the router.The paper describes the working model of th e scheme in detail and makes an analysis to its performance.