基于追踪部署的着色包标记算法的研究 *

基于追踪部署的相关理论和着色包标记算法,针对当前危害很大的分布式拒绝服务攻击,提出一种基于追踪部署的IP回溯算法。该算法是以贪心算法为基础,利用K-剪枝算法在网络拓扑图中找出一些关键的路由器,利用这些路由器也就是只让tracers对过往的数据包按照着色包标记算法进行标记,这样不但减少了重构路径所需的数据包数,降低了路径误报率,提高了追踪到攻击者的速度,而且大大减轻了路由器标记的负担,从而能够迅速准确地找到攻击源。

Research on coloring packetmarking algorithm based on tracers placement

Based on the theory of tracers placement and coloring packetmarking algorithm,this paper proposedan IP traceback algorithm based on tracers placement against DDoS.The algorithm was based on the greedy algorithm using K-Diameter-Cut algorithm in the network topology map to identify some key routers.Using these routers also tracers to mark the packets according with coloring packetmarking algorithm not only could reduce the number of packets needed for path reconstruction and number of false positives,speed the tracing to attacker but also greatly reduced the burden on the router marker.Therefore,it can locate the attack origins rapidly and accurately.