【摘要】 实时性对于在DoS或DDoS网络攻击中发送假源地址包的主机进行IP反向追踪非常重要.提出一个IP实时反向追踪的模型CoMM(CooperativeMarkingandMitigation),在受害者主动参与和自治网络协调员的帮助下推测攻击路径,局部推测的攻击路径可以帮助受害者推测的攻击路径进行验证,上游路由器采取限速方式减小攻击程度的同时保证合法用户流量的传输和受害者正常推测攻击路径的流量需要,并有效的降低路由器参加追踪的开销.更多还原

【Abstract】 Real-time is very important to IP tracebacking hosts that send spoofed source address packets in DoS or DDoS attacks. We propose a real-time IP traceback model based on cooperative marking and mitigation. In this model, with the cooperation of autonomous network coordinator, the victim constructs attacking paths actively. Local results sent to the victim by coordinators can valid attacking paths. By rate limiting, routers can mitigate attack degree, which ensures legitimate traffic transmission and the traffic amount for the victim to construct attacking paths. This model can decrease router’s overhead for tracebacking effectively.更多还原