Dynamically extensible and efficient single packet tracing method

Abstract

The invention discloses a dynamically extensible and efficient single packet tracing method. The method comprises the following steps: in an inter-domain network composed of transit domains, constructing an anti-anonymous union by using all tracing Stub domains, wherein the anti-anonymous union configures ACL filtering rules on boundary routers of the tracing Stub domains, so that all anonymous packets entering the inter-domain network are cleared; constructing a tracing network in the tracing Stub domains, and establishing path fingerprint in the tracing network; and after the occurrence of attack, a network service provider directly locates an attack domain via the source address and an inlet router of the anonymous packet by using the anti-anonymous union, and then reduces an attack path through the extracted path fingerprint. By adoption of the dynamically extensible and efficient single packet tracing method disclosed by the invention, the coupling between autonomous domains is weakened so as to achieve the purpose of phased management and flexible control, and the leakage of the network topology privacy is avoided as well, which is beneficial to the expansion of the scale of the tracing system.

Description

technical field [0001] The invention relates to a dynamically expandable and efficient single-packet traceability method, which belongs to the technical field of IP traceability. Background technique [0002] Among many network security issues, "IP anonymity" is undoubtedly one of the most serious security risks restricting the development of the Internet. Among them, the source address forgery technology is a major IP anonymity method. In order to carry out normal communication on the Internet, when the message sender sends a message, it needs to fill in the real IP address assigned to the sender in the source address field, so that the report Only the receiver of the text knows the destination address when sending the reply. For a special purpose, the sender of the message modifies the source address carried in the message to an arbitrary address. This behavior is called forging the source address. A series of notorious network attacks (including SYNFlooding, DNS amplifi...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a dynamically expandable and efficient single-package traceability method, which can effectively solve the problems existing in the prior art, especially the flat system structure, and the traceability management granularity is relatively single, so that autonomous domains must Seamless cooperation, which not only conflicts with the current Internet multi-polarization management model, but also causes network topology privacy leakage, thus hindering the expansion of the traceability system

Images