| 基于包标记的DDoS攻击源追踪方案研究 |
| |
| 引用本文： | 代昆玉,胡滨. 基于包标记的DDoS攻击源追踪方案研究[J]. 科学技术与工程, 2011, 11(1) |
| |
| 作者姓名： | 代昆玉 胡滨 |
| |
| 作者单位： | 贵州大学,计算机科学与信息学院,贵阳,550025 |
| |
| 基金项目： | 贵州大学自青基合字(2009)028号资助 |
| |
| 摘 要： | 依据FMS标记思想,结合密码学的数字签名方法,设计了自适应hash签名标记方案AHSM。该方案是在包经过的路由器处,路由器按一个变化的概率对包进行hash签名。采用hash签名,签名速度快、误报率低、重构开销小,实现了IP地址的防篡改和发送者的不可否认,能有效地防止路由器假冒。采用变化的概率,可以减少受害者重构攻击路径时所需的数据包数,提高了追踪速度。
|
| 关 键 词： | 网路安全 DDoS攻击 包标记 攻击源追踪 |
| 收稿时间： | 2010-10-21 |
| 修稿时间： | 2010-10-21 |
Research on DDoS Attack Source Traceback Scheme Based on Packet Marking |
| |
| DAI Kunyu and HU Bin. Research on DDoS Attack Source Traceback Scheme Based on Packet Marking[J]. Science Technology and Engineering, 2011, 11(1) |
| |
| Authors: | DAI Kunyu and HU Bin |
| |
| Affiliation: | DAI Kun-yu,HU Bin,WANG Jian(College of Computer science and Information,Guizhou University,Guiyang 550025,P.R.China) |
| |
| Abstract: | According to the FMS marking idea and using cryptographic digital signature,a self-adaptive hash digital signature marking scheme AHSM is designed,which means that the routers that the packet passed by will give a hash digital signature with a variable probability.Using hash digital signatures,the signature processing speed is fast,false positive is low and the over head of reconstruction attack path is low.It makes the IP address anti-tampered,and makes the user non-deniable.Furthermore it can effectively ... |
| |
| Keywords: | network security DDoS attack pack-making attack source-tracing |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《科学技术与工程》浏览原始摘要信息 |
|
点击此处可从《科学技术与工程》下载全文 |
|
