IP Traceback And Information Capture Research

With Internet popularized quickly, the problems of importance to network security are attached by more and more people. DDoS(Distributed Denial of Service) attacker utilize the disadvantage of existing IP,source IP address spoofing and change the packet information to make the attacker can disguise itself more effectible, therefore the existing network pursue mechanisms and protect technology is inefficient to this.Comparing with IPv4, as the next generation protocol, IPv6 have more advantages, the ability of protect network security excelled IPv4.But many security mechanisms which used now can not compatible with IPv6, so it is limited efficient application.In this thesis, based on IPv6, the security policies are analyzed and researched to against DDoS attacks, and provide the methods to IP traceback and information capture.In this thesis, the principle of DDoS, common tools and manners of attacks, firstly, are analyzed and researched in detail. Secondly, characteristic of IPv6 head package is analyzed, and compared with IPv4 in their function. With analyses principle of tracing back the source of DDoS attacks, the IP traceback and a traceback scheme which based on double nodes verified packet marking: DNVM is designed to against the DDoS attacks. Based on the groundwork, arithmetic and program to improve it to make it adapt to IPv6 are given. Using some field which has not been defined in IPv6, markers are been storage. By this way, the DNVM can work on IPv6 normally. Finally, simulates the experiment of DDoS attacks under network simulator, which can private that the method and technology make DNVM used in IPv6 filed is viable.A summarization and presents of the next work which we will do are given at the end of the thesis.