【摘要】 绝大多数网络攻击都使用伪造的IP地址,使被攻击者很难确定攻击源的位置,从而不能有针对性地实施保护策略。能否找到一种类似于Traceroute方法的逆过程,能追踪报文的传输路径,是网络安全领域的一大难点。对攻击源定位问题进行了深入的研究、分析,对每一种方法进行了算法抽象,并用流程图描述,其中重点阐述了针对拒绝服务攻击的定位方法———采样标记法。最后通过研究、比较当前所有的定位方法,归纳出攻击源定位问题的本质及其数学模型。更多还原

【Abstract】 Most of the network attacks use spoofing IP address,which makes it very difficult to tracing attack to its real origin.Several tracing attack methods are discussed,analyzed and abstracted,especially those methods of solving denial of service attacks.The core algorithms of each methods are described in flowchart.Finally,these methods are compared,then a mathematical model is educed,it reveals the essence of the tracing attack problem.更多还原