【摘要】 防御分布式拒绝服务攻击(DDoS)是当前网络安全中最难解决的问题之一,在提出的多种对策中,通过概率包标记算法来进行IP跟踪受到广泛重视。这里分析了当攻击者伪造数据包的标记信息时,概率包标记法及其变种算法的安全性问题,并提出了一些改进措施,通过实验证明提高了算法的安全性。更多还原

【Abstract】 Defending against distributed denial of service attack is one of the hardest security problems on the Internet today.Among several countermeasures,probabilistic packet marking(PPM) used for IP traceback is promising.In this paper,an analysis of the security of some probabilistic packet marking schemes is provided when the marking information is spoofed by the attacker.Some modifications are provided which can improve the security of the scheme.更多还原