Research On Technologies Of IP Traceback To Denial Of Service Attack

With the development of network technology and application, network security becomes increasingly more important. DoS attack is among the hardest security problems to address because it is easy to launch, difficult to defend and trace. It is very harmful to the Internet and will become one of the important tools in the future information warfare. Therefore, it is very important to research the principles of DoS attack so that we can deal with it efficiently.In this paper, the mechanism, methods of DoS attack and countermeasures to DoS attacks are discussed. And several representative tools about DoS attack are analyzed. On this basis, we lucubrate the basic probabilistic packet marking scheme presented by Savage and the adaptive probabilistic packet marking scheme. Their mechanism is that the data packets are filled with the information of address of the router when they pass through the router, so the victim can find the path of attack through the information. The characteristic of DoS attack is that a great large number of data packets are used to attack the users. According to the characteristic, the arithmetic of Block Interleave Probabilistic Packet Marking is given, which can reduce the workload and the number of packet required in the attack tree reconstruction. We also ameliorate the marked packet so that the scheme can be applied to IPv6 networks. The proposed scheme has applicable value in IPv6 networks.