| 一种分块包标记的IP追踪方案 |
| |
| 引用本文： | 曲海鹏, 李德全, 苏璞睿, 冯登国. 一种分块包标记的IP追踪方案[J]. 计算机研究与发展, 2005, 42(12): 2084-2092. |
| |
| 作者姓名： | 曲海鹏 李德全 苏璞睿 冯登国 |
| |
| 作者单位： | 中国科学院软件研究所信息安全国家重点实验室,北京,100080;中国科学院研究生院,北京,100049;中国科学院软件研究所信息安全国家重点实验室,北京,100080 |
| |
| 基金项目： | 国家自然科学基金项目（60273027）;国家杰出青年基金项目（60025205）;国家“九七三”重点基础研究发展规划基金项目（G1999035802）. |
| |
| 摘 要： | DDoS攻击以其高发性、高破坏力和难以防范的特点，近年来成为互联网的主要安全威胁之一.研究者们提出了多种对抗DDoS攻击的方法.其中，Savage等人提出的概率包标记方案以其易于实施、消耗资源小等优点，引起人们的重视.然而概率包标记方案存在两个明显缺陷：多攻击路径重构时的高误报率和高计算复杂度.在概率包标记的基础上，提出了一种分块包标记方案，该方案与概率包标记方案相比具有较低的误报率和较低的计算复杂度，因而具有更高的实际应用意义.
|
| 关 键 词： | 网络追踪 拒绝服务 DoS 分布式拒绝服务 DDoS 包标记 |
| 收稿时间： | 2004-06-14 |
| 修稿时间： | 2004-06-142005-02-04 |
An IP Traceback Scheme with Packet Marking in Blocks |
| |
| Qu Haipeng, Li Dequan, Su Purui, Feng Dengguo. An IP Traceback Scheme with Packet Marking in Blocks[J]. Journal of Computer Research and Development, 2005, 42(12): 2084-2092. |
| |
| Authors: | Qu Haipeng Li Dequan Su Purui Feng Dengguo |
| |
| Affiliation: | 1 State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing 100080;2 Graduate University, Chinese Academy of Sciences, Beijing 100049 |
| |
| Abstract: | DDoS attack is a big problem to the Internet community due to its high-profile, severe damage, and the difficulty in defending against it. Several countermeasures are proposed for it in the literature, among which, probabilistic packet marking (PPM) first developed by Savage et al is promising. However, the PPM marking schemes have the limitations in two main aspects: high computation overhead and large number of false positives. An IP traceback scheme with packet marking in blocks is proposed, which is more practical because of higher precision, and computationally more efficient compared with the PPM scheme proposed by Savage. |
| |
| Keywords: | IP traceback denial of service DoS distributed denial of service DDoS packet-marking traceback |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机研究与发展》浏览原始摘要信息 |
|
点击此处可从《计算机研究与发展》下载全文 |
|
