| 摘要: |
| 提出了一种新型的边采样方法"路由器矢量边采样"(RVES),使得概率包标记(probability packet marking,简称PPM)设备容易实现和部署.在图论模型上,RVES以网络接口替代路由器作为顶点,以路由器"矢量边"替代传统采样边.该方法实施简单,标记概率的策略配置灵活,可以有效解决分布式拒绝服务(router's vector-edge-sampling,简称DDoS)攻击的重构问题.基于传统边采样的PPM相关技术依然适用于RVES方法.原理样机已经研制出并部署在Internet上.实验结果验证了该方法的有效性和可行性. |
| 关键词: IP追踪 PPM(probability packet marking) DoS(denial-of-service) DDoS(distributed denial-of-service) 网络安全 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Natural Science Foundation of China under Grant No.60403006 (国家自然科学基金); the National Basic Research Program of China under Grant No.G1999035801 (国家重点基础研究发展计划(973)) |
|
| An IP Traceback Technique Based on Router's Vector-Edge-Sampling |
|
WEI Jun,LIAN Yi-Feng,DAI Ying-Xia,LI Wen,BAO Xu-Hua
|
| Abstract: |
| A new edge sampling approach called the'Router's Vector-Edge-Sampling(RVES)'is presented,which is simple for PPM(probability packet marking)to be implemented and deployed.In the graph model,vertexes are denoted by network interfaces instead of routers,while edges by vector edges instead of traditional ones.With better simplicity of implementation and flexibility of policy deployment,RVES features effectiveness for Distributed Denial-of-Service(DDoS)attack reconstruction.PPM technologies based on traditional edge sampling are still applicable.Prototypes have been deployed in the Internet and experiments prove the effectiveness and feasibility of RVES. |
| Key words: IP traceback PPM(probability packet marking) DoS(denial-of-service) DDoS(distributed denial-of-service) network security |
