Research On IP Traceback Techniques In Distributed Denial-of-Service Attack

Computer networks have penetrated into every nook of military, working and life today. With the development of networks technology ,the issues of networks security are becoming more and more important. Since it is easy to implement and difficult to prevent, Distributed Denial of Service(DDoS) attack is an awkward question which occurred frequently and really difficult to solve. As a result, the meaning of researches on DDoS is significant,and the researches on DDoS are hot spots in networks security field.This article focused on the mechanisms and methods of Denial of Service (DoS) and DDoS, analysised the advantages and limitations of various tracking techniques, and pointed out the importance and challenges of source traceback. On this basis, we discussed Fragement Marking Scheme(FMS) which is a sheme to track the attack source. The FMS has a very high computation overhead for the victim to reconstruct the attck paths and gives a large number of false positives when the attack originates from multiple attackers. In order to reduce the limitations in FMS, we posed an improved scheme which only require fewer fragment combinations to reconstrut attack paths for victim and decreases the comutation overhead greatly by adding a new marking field named group-ID.Bace on the theoretical study, a simulation experiment is conducted to validate the improved scheme. Simulation results show that the improved scheme has better efficiency and fewer false positives under massive DDoS attack.Since the IPv6 will inevitably take the place of IPv4 as the next generation of the Internet Protocol, We studied the DDoS attack on IPv6 networks at the end of thesis, dicusseed various attack and traceback model.