高级检索

    一种分块包标记的IP追踪方案

    An IP Traceback Scheme with Packet Marking in Blocks

    • 摘要: DDoS攻击以其高发性、高破坏力和难以防范的特点,近年来成为互联网的主要安全威胁之一.研究者们提出了多种对抗DDoS攻击的方法.其中,Savage等人提出的概率包标记方案以其易于实施、消耗资源小等优点,引起人们的重视.然而概率包标记方案存在两个明显缺陷:多攻击路径重构时的高误报率和高计算复杂度.在概率包标记的基础上,提出了一种分块包标记方案,该方案与概率包标记方案相比具有较低的误报率和较低的计算复杂度,因而具有更高的实际应用意义.

       

      Abstract: DDoS attack is a big problem to the Internet community due to its high-profile, severe damage, and the difficulty in defending against it. Several countermeasures are proposed for it in the literature, among which, probabilistic packet marking (PPM) first developed by Savage et al is promising. However, the PPM marking schemes have the limitations in two main aspects: high computation overhead and large number of false positives. An IP traceback scheme with packet marking in blocks is proposed, which is more practical because of higher precision, and computationally more efficient compared with the PPM scheme proposed by Savage.

       

    /

    返回文章
    返回