Research on Attack Source Traceback

Abstract

The existing methods of attack traceback still have many defects, such as input debugging method requires the professional intervention; ICMP traceback message takes up the network bandwidth resources and so on, so a new collaborative network is picked up, based on ant source of ideological attack tracking method. This method is mainly used strategy from ICMP traceback message, that is, data packet attacked is backed-up on the network monitor, and then the scope of the query path information is reduced using the ant colony algorithm, enabling rapid construction of the attack path. Experiments show that the method improves the query speed of tracking information and the accuracy of positioning the source attack.