Efficient safety tracing scheme based on flooding attack

Abstract

The disclosed scheme is a scheme for defending DoS/DdoS attack actively. Tracing attack source, the invention restrains attacks from source. Tracing to source of attack provides evidence for investigating liability of attacker further. Researching on algorithm, the invention strengthens own security from algorithm self, and enhances interference immunity of the algorithm. Probability method for selecting marker is adopted in the scheme instead of original fixing probability method for each route forwarding node so as to optimize capability when attack route is reconstructed.

Description

technical field [0001] The invention is an attack source tracing scheme for flood attacks. It is mainly used to find the source of the attack in the case of a flooding network attack, so as to contain the attack at the source of the attack, and at the same time ensure the security of its own algorithm, which belongs to the field of network security technology. Background technique [0002] Denial of Service (DoS, Denial of Service) and Distributed Denial of Service (DDoS, Distributed Denial of service) are the most common network attacks in today's network attacks, and among them, flooding attacks are the most effective means of attack. Our ultimate tool, favored by some with ulterior motives. In order to fight against attacks, many companies have invested a lot of costs, and have also proposed some effective solutions. The solution mainly focuses on two aspects: one is from the perspective of filtering network attack traffic, and the main solutions include Ingress filteri...

AI Technical Summary

Problems solved by technology

To completely prevent these attacks, we can only change the current network protocol, but this is temporarily impossible

Another solution is to start from the perspective of tracking the location and identity of the attacker. This is also a research hotspot. The purpose is to prevent the attack from the source of the attack and deter the attacker. At present, there are some research results, but the current solutions Either due to performance problems, it cannot be applied, or its own algorithm has security risks, making the application prospect poor

Images