| 摘要: |
| 拒绝服务攻击是一类最难对付的网络安全问题.近来,人们提出了多种对策.其中由Savage等人提出的一类基于概率的包标记方案比较有研究价值.这里先对拒绝服务攻击的对策作一简述,然后分析了几种包标记方案,指出了它们的一些缺陷,并提出了一些改进措施.其中,对基本型概率包标记方案的一个修改使得计算量大大减少. |
| 关键词: 网络追踪 拒绝服务 DoS 分布式拒绝服务 DDoS 包标记 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Outstanding Young Scientists Foundation of China under Grant No.60025205(国家杰出青年基金);the National Grand Fundamental Research 973 Program of China under Grant No.G1999035802(国家重点基础研究发展规划项目(973) |
|
| Notes on Packet Marking for IP Traceback |
|
LI De-Quan,SU Pu-Rui,FENG Deng-Guo
|
| Abstract: |
| Distributed Denial of Service(DDoS)attack is among the hardest network security problems to address.Recently,several countermeasures are proposed,among which,PPM(probabilistic packet marking)pioneered by Savage et al.is promising.In this paper,a brief review of countermeasures to DDoS is given and then an analysis on some of the packet marking schemes is provided.Some modifications are further provided.One modification to the basic PPM scheme can reduce its computation remarkably. |
| Key words: IP traceback denial of service DoS distributed denial of service DDoS packet marking |
