摘要
依据FMS标记思想,结合密码学的数字签名方法,设计了自适应hash签名标记方案AHSM。该方案是在包经过的路由器处,路由器按一个变化的概率对包进行hash签名。采用hash签名,签名速度快、误报率低、重构开销小,实现了IP地址的防篡改和发送者的不可否认,能有效地防止路由器假冒。采用变化的概率,可以减少受害者重构攻击路径时所需的数据包数,提高了追踪速度。
According to the FMS marking idea and using cryptographic digital signature,a self-adaptive hash digital signature marking scheme AHSM is designed,which means that the routers that the packet passed by will give a hash digital signature with a variable probability.Using hash digital signatures,the signature processing speed is fast,false positive is low and the over head of reconstruction attack path is low.It makes the IP address anti-tampered,and makes the user non-deniable.Furthermore it can effectively defend against routers being tampered.With a variable probability,it will take fewer packets to reconstruct the attack path,thus the victim could respond to attack more promptly.
出处
《科学技术与工程》
2011年第1期184-188,共5页
Science Technology and Engineering
基金
贵州大学自青基合字(2009)028号资助
