A dynamically scalable and efficient single-packet traceability method

Abstract

The invention discloses a dynamically expandable and efficient single-packet traceability method, comprising: in an inter-domain network composed of transit domains, using all traceability Stub domains to form an anti-anonymous alliance, and the anti-anonymous alliance passes through each traceability Configure ACL filtering rules on the border routers in the Stub domain, so that all anonymous packets that are about to flow into the inter-domain network are cleaned up; in each traceability Stub domain, build a traceability network, and establish a path fingerprint in the traceability network; when the attack occurs , by using the anti-anonymity alliance, the network service provider directly uses the source address of the anonymous packet and the ingress router to locate the attack domain, and then restores the attack path by extracting the path fingerprint. The invention weakens the coupling between autonomous domains, thereby achieving the purpose of phased management and flexible control, and avoiding the leakage of network topology privacy, which is beneficial to the expansion of the scale of the traceability system.

Description

technical field [0001] The invention relates to a dynamically expandable and efficient single-packet traceability method, which belongs to the technical field of IP traceability. Background technique [0002] Among many network security issues, "IP anonymity" is undoubtedly one of the most serious security risks restricting the development of the Internet. Among them, the source address forgery technology is a major IP anonymity method. In order to carry out normal communication on the Internet, when the message sender sends a message, it needs to fill in the real IP address assigned to the sender in the source address field, so that the report Only the receiver of the text knows the destination address when sending the reply. For a special purpose, the sender of the message modifies the source address carried in the message to an arbitrary address. This behavior is called forging the source address. A series of notorious network attacks (including SYNFlooding, DNS amplifi...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a dynamically expandable and efficient single-package traceability method, which can effectively solve the problems existing in the prior art, especially the flat system structure, and the traceability management granularity is relatively single, so that autonomous domains must Seamless cooperation, which not only conflicts with the current Internet multi-polarization management model, but also causes network topology privacy leakage, thus hindering the expansion of the traceability system

Images