改进的概率包标记IP追踪方法

摘要

概率包标记(PPM)是对分布式拒绝服务攻击进行IP追踪的有效方法,但PPM及其改进方法大多存在"最弱链"问题.为解决上述问题,使用可变概率包标记,只需2个有效分片即可重构出一条边,从而降低受害者重构路径时所需接收的包数量.理论分析与实验结果证明了该方法的有效性.%Probabilistic Packet Marking(PPM) is an effective method for IP traceback of DDoS attack.However, there is weakest link problem in PPM and most improved schemes.This paper uses variational PPM to solve the problem, needing only two efficient fragments to build one edge, so that it reduces the number of packets required for path reconstruction.Analysis and experiments prove the effect of the method.