An IP Traceback Scheme Based on Marking-in-Order

QU Hai-peng; FENG Deng-guo; SU Pu-rui

您当前的位置：

首页 >

文章列表页 >

An IP Traceback Scheme Based on Marking-in-Order

更新时间：2025-07-16

- An IP Traceback Scheme Based on Marking-in-Order
- Acta Electronica Sinica Vol. 34, Issue 1, Pages: 173-176(2006)
- 作者机构：
  
  1. 中国科学院软件研究所信息安全国家重点实验室,北京,100080
  2. 中国海洋大学计算机系,山东,青岛,266071
  3. 中国科学院软件研究所信息安全国家重点实验室北京,100080
  4. 中国海洋大学计算机系山东青岛,266071
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP309
- Published：2006
- 稿件说明：
移动端阅览
QU Hai-peng, FENG Deng-guo, SU Pu-rui. An IP Traceback Scheme Based on Marking-in-Order[J]. Acta Electronica Sinica, 2006, 34(1): 173-176.
DOI：

QU Hai-peng, FENG Deng-guo, SU Pu-rui. An IP Traceback Scheme Based on Marking-in-Order[J]. Acta Electronica Sinica, 2006, 34(1): 173-176. DOI：

摘要

包标记方案是一种针对DoS攻击提出的数据包追踪方案

由于其具有响应时间快、占用资源少的特点

近年来受到了研究者的广泛关注.但由于包标记方案标记过程的随机性

使得受害者进行路径重构时所需收到的数据包数目大大超过了进行重构所必需收到的最小数据包数目

从而导致重构误报率的提高和响应时间的增长.本文提出了一种基于有序标记的IP包追踪方案

该方案通过存储每个目标IP地址的标记状态

对包标记的分片进行有序发送

使得在DoS发生时

受害者重构路径所需收到的标记包的数目大大降低

从而提高了对DoS攻击的响应时间和追踪准确度.该算法的提出进一步提高了包标记方案在实际应用中的可行性.

Abstract

Packet Marking Scheme have been proposed for achieving traceback of DoS attacks

which has several advantages such as short responding time and small resource consuming.Since the randomicity of the packet marking procedure

the number of the packets needed by the victim in reconstructing is much more than the minimum number of packets required

therefore resulting in the increase of the rate of false positives and the responding time.In this paper

a marking-in-order scheme is proposed

which need less packets in reconstructing procedure because of marking the packets in order by storing every target IP's marking state in a hash table.The scheme is more practical for its high efficiency.

关键词

Keywords

references

Views

1015

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Adaptive Packet Marking for IP Traceback

Related Author

LI De-quan

XU Yi-ding

SU Pu-rui

FENG Deng-guo

Related Institution

State Key Laboratory of Information Security,Institute of Software,CAS,P.O. box 8718,Bejing

UNIX User's Association of China,No.31 Xueyuanlu,Bejing

State Key Laboratory of Information SecurityInstitute of SoftwareCASP.O. box 8718Bejing 100080China

UNIX User's Association of ChinaNo.31 XueyuanluBejing 100083China

⁰