An Intelligent Packet Marking Algorithm Based on Extended Huffman Coding
Ruijuan Zheng, Qingtao Wu, Mingchuan Zhang · 2008
Packet marking technology has excellent response ability in tracing network intrusion, declining intrusion damage and preventing intrusion diffusion. Lacking of alarm preprocessing, current packet marking technologies can't autonomously and effectively provide reliable packets to intrusion tracing. Aiming at the problems, an intelligent packet marking algorithm based on Extended Huffman coding (EH-AM, for short) is proposed. And false alarm density is adopted to implement the autonomous confidence study of specified alarm, which endows some intelligence with EH-AM. At last, a simulation is carried out to verify the performance of packet marking procedure, confidence study process and tracing response of EH-AM.