摘要： 根据拒绝服务攻击的原理和特点，提出了对流经路由器的数据包抽样，用相邻两路由器地址来标注包，以使得受害主机能够利用被标注包内的信息重构出攻击路径集，从而追踪到拒绝服务攻击源点的技术。文中分析了数据包标注和路径重构算法。

关键词: 拒绝服务攻击, 路径重构, 攻击源追踪, TCP/IP, 网络安全

Abstract: The principle and characters of denial of service attack is analyzed in this paper. Then a traceback mechanism based on probability marking packet in the network is presented. The victim can use the edges sampled in these packets to reconstruct attack path. The algorithms of marking packets and reconstruction attack path are presented and analyzed.

中图分类号: 

• TP393.08