一种针对DDoS攻击的非侵入性IP追踪方案

该文针对DDoS攻击提出了一种非侵入性IP追踪方案,在正常状态下对转接网络路由器中数据包进行概率采样,利用路由器的cache来保存数据包的有效源地址,受攻击时检测出未知来源地址,构造出攻击路径图。仿真证明该方案不需要改变路由器配置与协议,也不需要用各类检测技术收集大量准确的攻击信息。计算量的分布式处理使该方案有很好的可扩展性,能够对攻击源进行简单有效的快速追溯。

No-Intrusive IP Traceback for DDoS Attacks

The scheme which uses sampled traffic under non-attack conditions to build and maintains caches of the valid source addresses transiting network routers. Under attack conditions, route anomalies are detected by determining which routers have been used for unknown source addresses, in order to construct the attack graph. Results of simulation studies are presented. Our approach does not require changes to the Internet routers or protocols. Precise information regarding the attack is not required allowing a w...