Research On Defensive Denial Of Service Attacks And IP Traceback Technology

With the computer network technology and the rapid development of the growing popularity of Internet applications, network information society has become an indispensable part of the network security issues become more important. Denial of service attacks because of easy implementation, it is difficult to prevent, difficult to track, and other known and most difficult to solve the problem of network security, network to bring great harm. In this Thesis, the problem, denial of service attacks to network-centric technology to track a series of studies and achieved the following results:1.This Thesis summarizes the first denial of service attack on the principles, methods, as well as measures analysis of a variety of techniques to attack, attack and attack mode, and other effects. Denial of service attacks carried out on the quantitative classification, in order to further denial of service attack and defense provided the basis for further study to track.2.Advanced packet marking for existing methods of marking format, cause the victims of the attack path reconstruction of the high rate of false positives problem, this Thesis proposes an approach based on the address of the tag format splicing. Derived through the mathematical model can prove, using this Thesis marking strategy can significantly reduce the attack path reconstruction of false alarm rate, making the victim more quickly trace the source of the attack, for the victims of the corresponding attack to reduce the attacks created conditions of loss, but also allows an attacker to send forged information to the victims difficult.3.This Thesis on the advanced packet marking and Thesis-based address marking splicing algorithms, network simulation in NS2 and VC6.0 software platform on the above two markers compared the simulation algorithm. Experiments show that the algorithm proposed in this Thesis in the path of reconstruction of the attack on false alarm rate indicators have improved, and verify the algorithm can be implemented and effective. In general, this article on denial of service attacks on Web tracking done more in-depth studies, a marked improvement program to enhance the denial of service attacks to track the accuracy and speed made good results.