Abstract: This paper presents a new scheme for IP traceback, which uses Raw IP to transfer messages. In this scheme a concept of restrained period is produced. And its most advantage is locating the attackers directly, while others need reconstruct the entire paths. The analytic and simulation results show that the proposed scheme offers low overhead to router, bandwidth and the victim, and can also handle DDoS attacks

Key words: IP traceback; DoS; DDoS; Raw IP

摘要： 提出了一种新型的使用Raw IP 的IP 追踪方法，该方法引入了抑制期的概念，其最大的优点就是可以直接定位攻击者，而无需像其他方法那样重组整个路径。通过模拟和分析得出，该方法是一个对路由器、网络带宽、受害主机的额外负担很小，同时还具有DDoS 追踪能力的有效方法。

关键词: IP 追踪；DoS；DDoS；Raw IP