MPLS网络的信源追踪方法研究

MPLS技术虽然为Internet提供了一种新的数据包转发模式,但是还不能消除其固有的网络攻击。基于流标记的端口包记录信源追踪系统则可以找到攻击源。包记录技术是整个追踪系统的核心。而其中所采取的基于流的策略可以大大节省存储空间;基于端口的策略通过减少反向追踪请求个数提高了追踪速度,进一步通过自适应的调整Bloom filter的k参数大大降低了追踪的误报率。

Research on an Attack Traceback Scheme in MPLS Network

MPLS technique provides a new packet transmission mode for Internet,but it can not avoid the inherent network attacks.Port-packet record based on Flow marking IP traceback system can find the attack origin.Packet record technique is the core of the whole traceback system.Thereinto,Flow-based strategy can save needless memory waste enormously;Port-based strategy increases the traceback speed by reducing the numbers of reverse traceback request.Furthermore,the mechanism which adjusts k parameters of Bloom filters adaptively can reduce the false positive rate greatly.