| 基于代理的IP包源追踪系统 |
| |
| 引用本文： | 王翠荣,高远.基于代理的IP包源追踪系统[J].东北大学学报(自然科学版),2003,24(7):662-665. |
| |
| 作者姓名： | 王翠荣 高远 |
| |
| 作者单位： | 东北大学秦皇岛分校,河北秦皇岛,066004 |
| |
| 基金项目： | 国家自然科学基金资助项目(60073059)· |
| |
| 摘 要： | 提出了一种不需要ISP合作的基于代理的IP包源追查体系结构,描述了支持这种体系结构的分布式包记录代理服务器和集中式反向追查安全控制服务器的实现步骤,扩充了UnixIP包转发算法,实现了包摘要算法和自动追查系统,解决了诸如可疑包的识别、记载、追踪的安全性,节省路由器资源·通过仿真实验证明基于代理的IP包追踪方法是行之有效的·
|
| 关 键 词： | 拒绝服务攻击 IP地址欺骗 IP包摘要 IP包追踪 Unix 包转发算法 代理 |
| 文章编号： | 1005-3026(2003)07-0662-04 |
| 修稿时间： | 2002年10月14日 |
Proxy-based IP Traceback System |
| |
| Wang,Cui-Rong ,Gao,Yuan.Proxy-based IP Traceback System[J].Journal of Northeastern University(Natural Science),2003,24(7):662-665. |
| |
| Authors: | Wang Cui-Rong Gao Yuan |
| |
| Institution: | (1) Qinhuangdao Branch, Northeastern Univ., Qinhuangdao 066004, China |
| |
| Abstract: | A new technique was presented to trace spoofed packets back to their actual source host without relying on the cooperation of intervening ISPs. An agent-based distributed architecture for tracing suspicious IP packets was outlined. An agent server was designed to record packet digests, and a security control server was designed to traceback the originator of a spoofing IP packet. The arithmetic forwarding IP packet in Unix OS was expanded. The packet digest arithmetic and the agent-based automatic tracing system were realized. The methods for identifying suspicious packets and recording packet digest were tested through the simulation experiments. The agent-based method of tracing IP packet is feasible. |
| |
| Keywords: | DoS attacking IP address spoofing IP packet digest IP packet tracebacking Unix packet forwarding agent |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《东北大学学报(自然科学版)》浏览原始摘要信息 |
| 点击此处可从《东北大学学报(自然科学版)》下载免费的PDF全文 |
