首页>
外国专利>
REAL-TIME PACKET TRACEBACK AND ASSOCIATED PACKET MARKING STRATEGIES
REAL-TIME PACKET TRACEBACK AND ASSOCIATED PACKET MARKING STRATEGIES
展开▼
机译:实时数据包追踪和相关数据包标记策略
展开▼
页面导航
摘要
著录项
相似文献
摘要
To facilitate effective and efficient tracing of packet flows back to a trusted point as near as possible to the source of the flow in question, devices on the border of the trusted region are configured to mark packets with partial address information. Typically, the markings comprise fragments of IP addresses of the border devices in combination with fragment identifiers. By combining a small number of marked packets, victims or other interested parties are able to reconstruct the IP address of each border device that forwarded a particular packet flow into the trusted region, and thereby approximately locate the source(s) of traffic without requiring the assistance of outside network operators. Moreover, traceback can be done in real-time, e.g. while a DDoS attack is on-going, so that the attack can be stopped before the victim suffers serious damage.
展开▼