首页> 外文会议>International Conference on Computational Science and Its Applications(ICCSA 2004) pt.4; 20040514-20040517; Assisi; IT >A Study on Marking Bit Size for Path Identification Method: Deploying the Pi Filter at the End Host
【24h】

A Study on Marking Bit Size for Path Identification Method: Deploying the Pi Filter at the End Host

机译:用于路径识别方法的标记位大小的研究:在最终主机上部署Pi过滤器

获取原文
获取原文并翻译 | 示例

摘要

Recently, DDoS attacks are more and more serious to the Internet. Many specialists research the defending methods against DDoS. Pi had been proposed as one of the defense methods against complicated DDoS attack by spoofed IP address. Pi is a new packet marking approach, and Pi enables a victim to identify packets traversing the same paths through the Internet on a per packet basis, regardless of source IP address spoofing. Marking size of Pi is the most important parameter of Pi marking scheme to decide the performance of Pi. At the end hosts' view, the most proper marking size of Pi is affected by the Internet environment and its topology. In existing Pi scheme, Pi filter deployed on the ISP's side of the last hop link, but this paper consider the Pi filter deployed at end host in the ISP and tried to find the most proper marking size.
机译:最近,DDoS攻击对于Internet越来越严重。许多专家研究了针对DDoS的防御方法。有人提出将Pi作为防御通过欺骗IP地址进行的复杂DDoS攻击的防御方法之一。 Pi是一种新的数据包标记方法,并且Pi使受害者可以基于每个数据包识别通过Internet遍历相同路径的数据包,而不考虑源IP地址欺骗。 Pi的标记大小是Pi标记方案决定Pi性能的最重要参数。从最终主机的角度来看,最合适的Pi标记大小受Internet环境及其拓扑的影响。在现有的Pi方案中,Pi过滤器部署在最后一跳链路的ISP端,但是本文考虑了Pi过滤器部署在ISP的最终主机上,并试图找到最合适的标记大小。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号