A Method for Source Tracing of IPv6 Attacks

Abstract

The invention relates to an IPv6 attack source tracing method. The IPv6 attack source tracing method includes an information flow classification step, a message marking step, a verification information generating step, and an information determining step. The IPv6 attack source tracing method proposes a more efficient and reasonable marking probability algorithm to determine the marking probability of messages, marks the messages by taking the flows as objects, and divides the flows into a large flow and a small flow according to the bandwidth occupancy rate. In order to avoid excessive numberof marked messages with the large flow, the marking probability is dynamically adjusted according to the bandwidth occupancy rate while the small flow is marked with a fixed probability to ensure marking for the small flow, so as to facilitate source tracing for a DDoS attack with fewer marked messages. The IPv6 attack source tracing method improves a traditional marking process, combines intra-domain source tracing with inter-domain source tracing, and selects an access network router and an autonomous domain border router to perform related marking to generate marked messages, thus maximally guaranteeing the integrity of a reconstructed path, being conductive to stopping the attack and marking the attack source.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an IPv6 attack source tracing method. Background technique [0002] With the rapid development of the Internet, the disadvantages of the IPv4 protocol are becoming increasingly apparent. There is a serious shortage of IP addresses. Although various solutions have been proposed to temporarily alleviate the contradiction, they cannot solve the problem for a long time. Various network attacks emerge in endlessly. DDoS attack has been an unavoidable form of attack on the network since its birth. Forging the source address of the message has caused great difficulties in attack source tracing and brought great damage to the society. Although the IPv6 protocol solves the problem of insufficient IP addresses in the IPv4 protocol, it still faces security risks. The IPv6 protocol has been widely promoted around the world, with a rapid development momentum. More and more people ...

AI Technical Summary

Problems solved by technology

[0019] Therefore, the technical problem to be solved by the present invention is to overcome the defects that the attack source tracing method in the prior art is not applicable to IPv6 only, is not practical and the marking method is easy to be tampered with

Images