Research Of Intrusion Traceback Technology

With the development and the aboard application of network, network intrusion has imposed more and more effect on users and their information. So it becomes increasingly pressing to the research of network information security. This thesis is for the purpose to explore the intrusion tracing technology. It is a research on the technology and measures to find out the source of intrusion attacks on the foundation of intrusion detection.This thesis introduces firstly the intrusion detection technology and its present situation and future development. The analysis summarizes the characteristics of several typical algorithms to current intrusion tracing technology, and afterwards makes a contrast to their different performance. The packet-marking algorithm is taken as key research content in this thesis. With the utilization of Hash function, IP and adaptive probability, a Hash-based packet-marking tracing engine is designed. Based on this engine, Distributed Intrusion Traceback System Based on Multi-Agent—DITSBA is presented, which integrates the intelligent Agents. The system realization goal, work principle, the system structure and each composition module function and reciprocity are elaborated. The performance of the system DITSBA is analyzed and evaluated, and the suggestion to the further work on DITSBA is given.