FIRE Flexible IntraAS Routing Environment灵活的帧内路由环境.pptVIP

Hash-Based IP Traceback Alex C. Snoeren?, Craig Partridge, Luis A. Sanchez, Christine E. Jones, Fabrice Tchakountio, Stephen T. Kent, W. Timothy Strayer BBN Technologies ?MIT Laboratory for Computer Science Network Security Risks Tools readily available to attackers network server attacks performance degradation attacks DOS DDOS Single packet attacks (Stop 0A in TCPIP.sys, Teardrop, Ping-of-death) Accidental (unintentional) attacks Approaches Firewalls - prevent attack packets from reaching the victim some attack packets look quite innocent hard to predict all possible attacks does not ge