Author Login Editor-in-Chief Peer Review Editor Work Office Work

Computer Engineering ›› 2010, Vol. 36 ›› Issue (2): 152-155. doi: 10.3969/j.issn.1000-3428.2010.02.054

• Security Technology • Previous Articles     Next Articles

IP Traceback Method Based on Dynamic Probabilistic Packet Marking

FENG Bo, GUO Fan, YU Min   

  1. (School of Computer and Information Engineering, Jiangxi Normal University, Nanchang 330022)
  • Received:1900-01-01 Revised:1900-01-01 Online:2010-01-20 Published:2010-01-20

基于动态概率包标记的IP追踪方法

冯 波,郭 帆,余 敏   

  1. (江西师范大学计算机信息工程学院,南昌 330022)

Abstract: Most of the Probability of Packet Marking(PPM) exist many problems such as the lost of marking information, the difficulties to reconstruct attack path, low accuracy and so on. Aiming this problem, this paper presents an IP traceback method based on Dynamic Probabilistic Packet Marking(DPPM), to further improve the effectiveness of PPM. Instead of using a fixed marking probability, this paper proposes to judge whether the packet has been marked or not then choose a proper marking probability. Experimental result shows that it can solve most of the problems in PPM method, reduce sample dependence and increase the accuracy.

Key words: IP traceback, Distributed Denial of Service attack(DDoS), Probabilistic Packet Marking(PPM), network security

摘要: 目前多数概率包标记都存在遗失标记信息、重构困难、准确率低等现象。针对该问题,提出一种基于动态概率包标记的IP追踪方法。采用动态标记概率代替原有的固定标记概率用于判断是否对数据包进行标记,应用更合适的概率对其标记。实验结果表明,该方法能解决标记覆盖问题,降低样本依赖性,提高准确率。

关键词: IP追踪, 分布式拒绝服务攻击, 概率包标记, 网络安全

CLC Number: