| DDoS攻击源追踪的一种新包标记方案研究 |
| |
| 引用本文： | 李金明,王汝传. DDoS攻击源追踪的一种新包标记方案研究[J]. 通信学报, 2005, 26(11): 18-23 |
| |
| 作者姓名： | 李金明 王汝传 |
| |
| 作者单位： | 南京邮电大学,计算机系,江苏,南京,210003 |
| |
| 基金项目： | ……一一0…II～,删’■^LL｜’口HJL!L置身份角度出发,这也是研究的热点,目的国家自然科学基金资助项目（60173037,70271050）;国家高科技“863”基金资助项目（2005AA775053）;江苏省自然科学基金资助项目（BK.2005146）;江苏省自然科学基金预研资助项目（BK2004218）;江苏省高技术研究计划基金资助项目（BG2004004）江苏省计算机信息处理技术重点实验室基金资助项目（05001） |
| |
| 摘 要： | 在对包标记方案的收敛性进行研究的基础上，给出了新的标记概率的选取方法，以得到最优化的收敛性；同时，为了对抗攻击者控制转发节点伪造信息而干扰路径重构算法，提出了一种新的安全的验证包标记方案。最后，对该方案的一些性能进行了仿真验证，结果显示，验证包标记方案的各方面性能均有较大提高。
|
| 关 键 词： | 网络安全 验证包标记 （分布式）拒绝服务攻击 攻击源追踪 |
| 文章编号： | 1000-436X（2005）11-0018-06 |
| 收稿时间： | 2005-02-23 |
| 修稿时间： | 2005-02-232005-09-08 |
Study of a new packet marking scheme for DDoS attack source traceback |
| |
| LI Jin-ming,WANG Ru-chuan. Study of a new packet marking scheme for DDoS attack source traceback[J]. Journal on Communications, 2005, 26(11): 18-23 |
| |
| Authors: | LI Jin-ming WANG Ru-chuan |
| |
| Affiliation: | Department of Communication Engineering, Nanjing University of Post and Telecommunications, Nanjing 210003, China |
| |
| Abstract: | On the base of study of packet marking scheme's convergence, a new method of choosing marking probability had been put forward to get the optimization of convergence. Meanwhile, a new safe verified packet marking scheme had been brought forward to countermeasure the information forged by routes which had been controlled by an attacker, and this forged information should disturb the arithmetic of rebuilding the attacking path. Lastly, this scheme's performances were emulated and tested and the result shows that the performances are better than other packet marking schemes. |
| |
| Keywords: | network security verified packet marking scheme DDoS attack source traceback |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《通信学报》浏览原始摘要信息 |
|
点击此处可从《通信学报》下载全文 |
