To solve the problem of Probabilistic Packet Marking ( PPM) method for IPv6 that the computational complexity of reconstruction and false alarm rate are too large, a new traceback method for IPv6 based on deterministic linear network coding was proposed. The method chose the hop-by-hop option extension header of IPv6 for the marked region and applied the deterministic linear network coding to the probabilistic packet marking. Moreover, the 64 bit sampling was employed to check the attack paths. The theoretical analysis and simulation in NS2 environment show that the method decreases the wasted network bandwidth and the amount of packets needed to reconstruct the path, reduces the computational complexity of reconstruction and false alarm rate, and improves the mark efficiency.%针对IPv6的概率包标记(PPM) IP追踪方法的重构路径算法复杂度和误报率过高等不足,提出基于确定线性网络编码的IPv6追踪方法.该方法采用IPv6逐跳选项扩展报头作为标记区域,将确定线性网络编码应用到概率包标记中,同时添加了64 bit的攻击路径采样.理论分析和在NS2环境下的仿真实验结果表明,该方法减少了占用的网络带宽和重构路径所需要的数据包数,降低了重构算法复杂度和误报率,提高了标记效率.
展开▼
