Abstract: It is an important network security problem that how to solve Denial of Service(DoS) attack. Several countermeasures are proposed for it in the literature, among which, the Probabilistic Packet Marking(PPM) scheme developed by Savage et al is promising. This paper improves PPM. Compared with PPM, it only needs four efficient fragments to build one edge, and is more efficient to reconstruct the attack path. Analysis and experiments show the effect of the scheme.

Key words: IP traceback, Denial of Service(DoS), Distributed Denial of Service(DDoS), Probabilistic Packet Marking(PPM)

摘要： 如何防御分布式拒绝服务攻击是当今最重要的网络安全问题之一。该文基于Savage等人提出的概率包标记方案，提出了改进方案，其只需4个有效分片就可以重构攻击路径，减少了IP的有效性验证次数，提高了重构攻击路径的速度。理论分析与实验结果证明了该方案的有效性。
关键词：IP追踪；拒绝服务

关键词: IP追踪, 拒绝服务, 分布式拒绝服务, 概率包标记

CLC Number: 

• TP393.08