METHOD FOR TRACING INTERNET PROTOCOL UNDER WIDE RANGE MULTIPATH ATTACK BY USING SPARSELY TAGGED FRAGMENT MARKING SCHEME

摘要

PURPOSE: An IP(Internet Protocol) tracing method against wide range multi-path attacks by intermittent tag transplant is provided to solve following problems at once; combination explosion, increase in wrong restoration percentage, a rapid increase in wrong restoration percentage of routers using the same tag, and uneasiness in submitting and maintaining a router map. CONSTITUTION: Each router performs a first algorithm. The first algorithm either performs or does not perform marking in all packets passing through. By the marking, an IP piece of a router, an offset value which indicates the position of the piece, and a 4-bit hash value tag of the router are attached to the packets. An attacked system performs a second algorithm. The second algorithm restores IPs of routers used in the attack, by using packets collected from the moment the attack is recognized. [Reference numerals] (AA) Start; (BB) Successively marking a point according to an offset value order of a router IP piece in each router by marking a point on all packets according to a specific probability; (CC) When a marking process is terminated according to the probability of P1, all packets which pass through each router are divided into a marking packet and a non-marking packet as a result; (DD) End