摘要： 对因特网上的DoS攻击进行了分类,分析讨论了已有的各种防范技术,提出了新的在AS的入口路由器端进行地址标记的IAM模型,使受害主机能通过分析攻击数据报中的地址标记信息,直接获取攻击入口路由器地址。随后可通知该路由器采取拦截或过滤等防范措施。

关键词: 拒绝服务攻击, 路径追溯, IAM

Abstract: The paper gives a classification of DoS attacks on Internet. The techniques to defeat DoS are analyzed. It presents a new scheme, IAM, with which can embed IP address into the packet at ingress router. Thus victim can recover the address of the ingress router by analyzing attack packets and tell the ingress router to do interceptions or filtering to restrain DoS attacks.

中图分类号: 

• TP393.08