摘要
在防范拒绝服务攻击的问题上,随机包标记方法是比较好的策略。已有方法之一是Savage提出的NodeSampling算法。ReverseNodeSampling在对NodeSampling算法性能进行理论分析的基础上,针对其缺陷做出一定程度上的改进。对改进后的算法在理论上进行性能分析,并在实验中验证。通过实验结果的比较,验证了改进后的算法在性能上大大优于原有的NodeSampling算法。
Probabilistic packet marking （PPM） is an efficient solution to defeat denial-of-service attacks. One of the available solutions is node sampling scheme proposed by Savage. Based on the theoretic analysis of node sampling scheme, some improvement are provided. Conducting performance analyzing is proven by simulation on the improved scheme by comparing the simulation results, the improved scheme is much better than the original node sampling scheme at performance is obtained.
出处
《计算机工程与设计》
CSCD
北大核心
2006年第18期3314-3317,共4页
Computer Engineering and Design
基金
国家自然科学基金项目(60373021)。
关键词
拒绝服务攻击
攻击源追踪
随机包标记
节点采样
反向节点采样
denial-of-service
IP traceback
probabilistic packet marking
node sampling
reverse node sampling
