基于IP地址重拼接的DDOS攻击源追踪算法

为了提高对分布式拒绝服务(DDoS)攻击源反向追踪的效率和准确度,提出了一个新算法.此算法不同于AMS(Advanced Marking Schemes)算法,是利用IP地址拼接技术,重定义IP数据包头部分字段,利用一种新的路由器地址编码格式,使得一个数据包携带更多路由地址信息,提高重构路径的效率,大幅降低误报率.相对于AMS算法,新算法明显提高了IP反向追踪的性能,降低了误报率.

DDOS attack source tracing algorithm based on the IP address re-stitching

To improve the distributed denial of service(DDoS) attack source traceback efficiency and accuracy,proposed a new algorithm that compared to AMS(Advanced Marking Schemes) algorithm,using the IP address of stitching techniques,re-define the IP data header part of the field,using a new router address coding format,making the route a packet to carry more address information to improve the efficiency of reconstruction of the path,dramatically reducing the false alarm rate.Relative to the AMS algorithm,the new algorithm significantly improves the performance of IP traceback,reduce false alarm rate.