摘要： 提出一种基于Internet无尺度特性的StackPi在途中过滤方法，与原有的StackPi在目的端过滤的方法相比，只须配置少量的(少于总节点量的10%)途中过滤机制就能在整个Internet范围内有效抑制IP源地址假冒。准确地找到Internet中具有高连接特征的集散节点是该方法的前提，使用该方法需要Internet的拓扑知识或其他能够定位集散节点的算法。

关键词: 无尺度特性, IP源地址假冒过滤, StackPi方法

Abstract: This paper proposes a halfway filter method to filter IP source address spoofing based on scale free property of Internet. Compared with the existing StackPi method, the great advantage of the method is that it only needs to deploy less than a tenth part in 100 of the nodes to efficiently suppress IP source address spoofing. The premise of the method is to accurately locate the hub by acquiring the topological property of Internet or by some algorithm that can locate the hub.

Key words: scale free property, IP source address spoofing filtering, StackPi method

中图分类号: 

• TP393.08