刘丽, 黄芳芳. IP追踪技术压缩边分片采样算法的改进[J]. 微电子学与计算机, 2010, 27(12): 78-81.
引用本文: 刘丽, 黄芳芳. IP追踪技术压缩边分片采样算法的改进[J]. 微电子学与计算机, 2010, 27(12): 78-81.
LIU Li, HUANG Fang-fang. Improvement of Compressed Edge Fragment Sampling Algorithm for IP Traceback[J]. Microelectronics & Computer, 2010, 27(12): 78-81.
Citation: LIU Li, HUANG Fang-fang. Improvement of Compressed Edge Fragment Sampling Algorithm for IP Traceback[J]. Microelectronics & Computer, 2010, 27(12): 78-81.

IP追踪技术压缩边分片采样算法的改进

Improvement of Compressed Edge Fragment Sampling Algorithm for IP Traceback

  • 摘要: IP追踪技术是防御拒绝服务攻击 (DoS) 的重要措施.文中针对用于IP追踪的压缩边分片采样算法 (CEFS) 存在的不足, 提出了标注分片自适应概率包标记算法 (LFAPPM) .该算法通过扩大标记空间和采用自适应概率的方法, 减少了重构路径所需包数, 并通过给分片加标注, 减少了重构路径的计算量和误报数, 而且通过初始化没被边界路由器标记的包标记空间, 加强了抗干扰性.与其他算法进行比较, LFAPPM算法各种性能指标较优.

     

    Abstract: IP traceback is an important measure to defend against Denial of Service (DoS) attack.Based on Compressed Edge Fragment Sampling algorithm (CEFS) for IP traceback, a new algorithm is proposed, called Lable fragment adaptive probability packet marking (LFAPPM) .By enlarging marking space and using adaptive probability for packet marking, the LFAPPM algorithm reduces the number of packets needed for attack path reconstruction.Moreover, the algorithm reduces computation and false positive number in reconstructing multiple attack path by labeling fragment.Then the algorithm strengthens the anti-interference capability by initializing marking space of packets which are not marked by Boder Router.Compared with other algorithms, the LFAPPM algorithm has better performance.

     

/

返回文章
返回