一种新的确定性包标记IP追踪算法的研究

目前的IP追踪都是基于反向完整路径追踪，反向完整路径追踪需要ISP的配合，而要取得所有的ISP的配合是一件困难的事情，在这这里提出一种新的基于确定性包标记技术的IP追踪算法，这种实现需要很少的带宽和处理的花费，可以追踪由单个数据包产生的DOS攻击，而且不需揭示网络拓扑的内在结构。

RESEARCH ON A KIND OF NEW IP DETERMINSTIC PACKET MARKING TRACEBACK ALGORITHM

At present,to DOS attacks,IP traceback algorithms mostly are full path traceback,but full path traceback generally need the assistance of all ISPs.We propose a new approach for IP traceback which is scalable and simple to implement,and introduces no bandwidth and practically no processing overhead.The approach is capable of tracing back attacks,which are composed of just a single packet.In addition,a service provider can implement this scheme without revealing internal network topology.