【摘要】 分布式拒绝服务攻击是当今网络安全领域最难防御的攻击之一。在众多的解决方法中,数据包标记无疑成为最主动和最有效的方法。该文通过提出一种结合自适应包标记和代数编码包标记两者特点的新型分布式拒绝服务攻击包标记方法来实现标记过程,并通过对攻击源发出的数据包进行分析重组和IP回溯,从而达到重构攻击树,追踪攻击源头的目的。更多还原

【Abstract】 DRDOS is one of the toughest defendable attack in the field of Internet Security. It’s not deny that packet marking scheme is the best and the most effective method in solving it. And this paper presents a new DRDOS packet marking method which is combined with AdaptivePacketMarking and CodePacketMarking to realize marking process. Meanwhile, it depends on the packets which comes from the attack source to analysis and make a IP traceback, so that it can reconstruct the attack-tree, as well as make tracks for the attack source.更多还原