Move - Static Combination Of Probabilistic Packet Marking Technology

With the popularity of the Internet, denial of service attacks has become a serious threat to network security. It's necessary for us to pinpoint the source of network attacks, which has become one of the hot spot for network security research currently. The paper focus on the probabilistic packet marking in the marking probability solved the problem that existing static probabilistic packet marking scheme can not be quickly reconstruct the attack path.First of all, the paper analysis fundamental theory related to the probabilistic packet marking techniques at home and abroad. Second, the program is presented a combined dynamic and static probabilistic packet marking scheme. The scheme not only has the characteristics of static probabilistic packet marking between the various routers in the group, but also has the characteristics of dynamic probabilistic packet marking between the different groups, it combined their respective advantages very well. Compared with the existing schemes, we proved that the new scheme has been greatly improved on the convergence, the burden of router has greatly improved also. Third, considering the weakest link has not been resolved yet. An improved dynamic - static combination of the probabilistic packet marking scheme was presented. In this scheme, in each group the number of router from four to two. The scheme has solved the weakest link problems to the static probabilistic packet marking schemes successfully. Besides convergence, routers burden and the weakest link of the three performance indicators-chain problems, the program presented the fourth characteristic to target - the storage space which router marking probability of storing required. The paper proved that in the storage and retrieval of router marking probability, dynamic - static combination of the probabilistic packet marking scheme is superior to dynamic probabilistic packet marking scheme.The result of experiments proved that although compared with the dynamic probabilistic packet marking, the new scheme is still have weakness on the convergence, but compared with the static probabilistic packet marking, the new scheme has improved greatly. Experimental and theoretical results show that the result is basically coincide, and further validates dynamic static combination of the probabilistic packet marking the scheme's legitimacy and effectiveness.