【摘要】 本文基于分片标记的基本原理,提出了一种新的分片标记方法NFMS,并通过模拟实验对攻击源定位方案的时效性、定位大范围DDoS攻击的性能、网络负载、负载处理、部署代价等作了分析和讨论,结果表明新的分片标记方法具有较低的网络负载和计算负载,并且反向定位所需报文个数大大减少,对DoS攻击可达到快速准确的定位,对于小范围的DDoS也具有较好的定位特性。更多还原

【Abstract】 The problem of identifying the sources of the Denial of Service (DoS) attack is one of the mostchallenging fields among the network security areas. In this paper, we propose a novel and efficient fragmentmarking scheme for IP traceback named as Novel Fragment Marking Scheme (NFMS), which extends the markarea. We evaluate the effectiveness of the proposed scheme by various performance metrics through simula-tion studies. The results show that the proposed scheme is practical. The key advantage of NFMS lies in highaccuracy, dramatic reduction of the number of packets required for traceback and low processing overhead.更多还原