多源网络攻击追踪溯源技术研究

网络攻击追踪溯源在定位攻击源、阻止或抑制网络攻击、提供法律举证、威慑攻击者等方面具有非常积极的意义。近年来，学术界对此开展了大量的研究，并提出了多种追踪溯源技术体制。分析了在大规模网络环境下网络攻击追踪溯源所面临的问题，以及当前主要技术体制的优缺点和适用性，提出了融合多种追踪溯源机制的多源追踪溯源技术思路，设计了基于信息融合的扩展性强、易于部署建设的MSNAA网络攻击追踪溯源系统架构。

Exploration on Attribution of Multi-source Network Attack

The attributing technology for network attack plays a key role in locating attack source, stopping or checking attack, providing lawful testimony, and deterring attackers. In this paper, the difficulties for network attack attribution in large-scale network are discussed, and the technical principles and technical characteristics of present attack-tracing approaches are described. Meanwhile the multi-source attributing approach in combination of multiple attributing mechanisms is proposed, and the information fusion-based multi-source network attack attribution architecture of strong scalability and easy deployment also de- signed.