Method of extracting average delay based on network device cache information transmission delay sequence

Abstract

The invention provides a method of extracting average delay based on a network device cache information transmission delay sequence. After a network delay sequence with switch or router cache is acquired, through a series of interval partitioning statistics and range filtering, data with switch cache influences removed are obtained; the data are subjected to further interval partitioning statistics, average delay is calculated, delay above and below an average delay threshold in the delay sequence is filtered, and a fit normal distribution function is drawn. If the measured network has a switch or a router, Ethernet frame information is cached, multiple continuous pieces of information from a transmitting end (information at a receiving end) and multiple continuous pieces of information from the receiving end (information at the transmitting end) can be detected, data in the delay sequence can thus be influenced, and a cache phenomenon when the switch or the router exists can be well processed.

Description

technical field [0001] The invention belongs to the field of network security, in particular to a method for extracting an average delay from information transmission delay sequences cached by switches or routers in the network. Background technique [0002] IP traceability technology is a hot and difficult issue in network research at present and in the future. At present, IP traceability technology uses routers as an intermediary to trace back to the real location of the attacker who sent the message with a forged address. Research on simple and effective IP traceability technology will be of great significance to eliminate DOS attacks and maintain the security and stability of the network environment. [0003] However, IP traceability technology cannot determine the source of information with the same IP address, that is, the current traceability technology has a strong dependence on IP, but users can easily forge their own IP addresses, use a large number of dynamic IP a...

AI Technical Summary

Problems solved by technology

[0003] However, IP traceability technology cannot determine the source of information with the same IP address, that is, the current traceability technology has a strong dependence on IP, but users can easily forge their own IP addresses, use a large number of dynamic IP addresses and private IP addresses, and equipment Unfavorable factors such as few logs can be kept for a long time, making it difficult to find a specific address renter at a specific time when tracing the source

Images