DDoS defense with IP traceback and path identification

JIN Guang; ZHANG Fei; QIAN Jiang-bo; ZHANG Hong-hao

您当前的位置：

首页 >

文章列表页 >

DDoS defense with IP traceback and path identification

更新时间：2024-10-14

- DDoS defense with IP traceback and path identification
- Vol. 32, Issue 2, Pages: 61-67(2011)
- 作者机构：
  
  宁波大学信息科学与工程学院
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.08
- Published：2011
- 稿件说明：
移动端阅览
JIN Guang, ZHANG Fei, QIAN Jiang-bo, et al. DDoS defense with IP traceback and path identification[J]. 2011, 32(2): 61-67.
DOI：

JIN Guang, ZHANG Fei, QIAN Jiang-bo, et al. DDoS defense with IP traceback and path identification[J]. 2011, 32(2): 61-67. DOI：

摘要

提出了将路径追溯和路径标识有机结合的设想

即在追溯出的上游节点有效识别过滤攻击分组。具体设计了一个新的分组标记和过滤方案。以受害主机所在自治域的边界路由器为界

之前的沿路节点标记路径信息

边界节点标记入口地址信息。受害主机可从到达的攻击分组中提取并还原相关信息

然后在域边界的攻击入口实施标识过滤。给出了完整的标记、共享存储和过滤方案

基于权威因特网真实拓扑的大规模仿真实验表明

方案防御效果较好

有效减轻了受害主机和目标域内上游链路遭受的攻击影响。

Abstract

A novel idea to combine both IP traceback and path identification（Pi） was proposed

and malicious packets could be identified and filtered at located upstream nodes.Then a practical packet marking and filtering scheme was proposed.The nodes along the path out of the destination domain deployed Pi.Meanwhile the border router of the destination domain deployed the traceback marking scheme.The victim could retrieve related information from arrived malicious packets.Then Pi-based filtering could be implemented at the border ingresses.A practical marking

storing and filtering scheme was provided in detail.The results of large-scale simulations with authoritative Internet topologies show the scheme is effective to alleviate attack impacts on the victim and upstream links in the destination domain.

关键词

Keywords

references

Views

823

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

CLB-Defense: based on contrastive learning defense for graph neural network against backdoor attack

Parallel algorithm for sensitive sequence recognition from long-read genome data with high error rate

Survey of IoT security research: threats, detection and defense

Survey on cyber deception

SAPA-based approach for defending DoS attacks in cloud computing

Related Author

Jinyin CHEN

Haiyang XIONG

Haonan MA

Yayu ZHENG

Hui SUN

Cheng ZHONG

Yuqing ZHANG

Wenjie WANG

Related Institution

Institute of Cyberspace Security, Zhejiang University of Technology

College of Information Engineering, Zhejiang University of Technology

School of Computer, Electronics and Information, Guangxi University

Key Laboratory of Parallel, Distributed and Intelligent Computing of Guangxi Universities and Colleges

National Computer Network Intrusion Protection Center, University of Chinese Academy of Sciences

AI问答

⁰