别名解析技术研究进展

doi:10.11959/j.issn.1000-436x.2019134

通信学报 ›› 2019, Vol. 40 ›› Issue (7): 169-185.doi: 10.11959/j.issn.1000-436x.2019134

别名解析技术研究进展

王占丰¹,程光²,胡超³,李晗⁴,翁年凤⁵,曹华平⁴()

¹ 东南大学计算机科学与工程学院，江苏南京 211189
² 东南大学网络空间安全学院，江苏南京 211189
³ 解放军陆军工程大学指挥控制工程学院，江苏南京 210007
⁴ 国家计算机网络应急技术处理协调中心，北京 100020
⁵ 南京电讯技术研究所,江苏南京 210007

修回日期:2019-05-05 出版日期:2019-07-25 发布日期:2019-07-30
作者简介:王占丰（1982- ），男，河北临城人，博士，东南大学在站博士后，主要研究方向为网络测量、网络性能分析与建模、网络安全。|程光（1973- ），男，安徽黄山人，博士，东南大学教授、博士生导师，主要研究方向为网络安全、网络测量与行为学及未来网络安全。|胡超（1984- ），男，江西吉安人，博士，解放军陆军工程大学讲师，主要研究方向为网络测量、SDN、网络空间安全等。|李晗（1986- ），男，四川成都人，博士，国家计算机网络应急技术处理协调中心高级工程师，主要研究方向为网络空间测量、网络基础资源管理。|翁年凤（1983- ），男，安徽天长人，博士，南京电讯技术研究所工程师，主要研究方向为数据工程、Web深度挖掘。|曹华平（1976- ），男，北京人，国家计算机网络应急技术处理协调中心高级工程师，主要研究方向为网络信息安全、互联网基础资源管理、可信网络等。
基金资助:
国家重点研发计划基金资助项目(2017YFB0801703);国家自然科学基金资助项目(61602114);赛尔网络下一代互联网技术创新基金资助项目(NGII20170406);东南大学博士后创新人才培养资助基金资助项目(2242019R20024)

Research on the IP alias resolution technology

Zhanfeng WANG¹,Guang CHENG²,Chao HU³,Han LI⁴,Nianfeng WENG⁵,Huaping CAO⁴()

¹ School of Computer Science and Engineering,Southeast University,Nanjing 211189,China
² College of Cyberspace Security,Southeast University,Nanjing 211189,China
³ College of Comannd Control Engineering,Army Engineering University of PLA,Nanjing 210007,China
⁴ National Computer Network Emergency Response Technique Team,Coordination Center of China,Beijing 100020,China
⁵ Nanjing Telecommunication Technology Research Institute,Nanjing 210007,China

Revised:2019-05-05 Online:2019-07-25 Published:2019-07-30
Supported by:
The National Key Research and Development Program of China(2017YFB0801703);The National Natural Science Foundation of China(61602114);CERNET Innovation Project(NGII20170406);Foundation for Training Postdoctoral Innovative Talents in Southeast University(2242019R20024)

摘要/Abstract

摘要：

别名解析是发现位于同一台路由器上不同IP接口的技术，是网络拓扑推断的一个关键步骤，将因特网的逻辑拓扑转换为物理拓扑从而实现虚拟空间与现实世界映射重要方法。首先介绍了IP别名解析的概念，分析了IP别名关系的种类，然后对IPv4和IPv6的别名解析算法分别进行了详细论述，最后通过对所有算法的综合分析和对比，指出了在未来的研究中，特别是IPv6别名解析中，在别名目标集合筛选、指纹选择及推断方法中应注意的问题。

关键词: 网络空间, 测量, IP别名解析, 拓扑

Abstract:

IP alias resolution,the procedure of identifying IP addresses belonging to the same router,is a critical step in Internet topology inference.It can convert the Internet logical topology into physical topology,and bridge the gap between the virtual world and real world.First the concept of IP alias resolution was introduced and the classical IP alias relationships were analyzed.Then the IPv4 alias resolution algorithms and the IPv6 alias resolution algorithms were discussed in detail separately.Finally,through the comprehensive analysis and comparison of all the algorithms,the research directions in the future especially in IPv6 alias resolution were pointed out in three folds such as alias target set selection,fingerprint selection and inference methods.

Key words: network space, measurement, IP alias resolution, topology

中图分类号:

TP393

王占丰,程光,胡超,李晗,翁年凤,曹华平. 别名解析技术研究进展[J]. 通信学报, 2019, 40(7): 169-185.

Zhanfeng WANG,Guang CHENG,Chao HU,Han LI,Nianfeng WENG,Huaping CAO. Research on the IP alias resolution technology[J]. Journal on Communications, 2019, 40(7): 169-185.

图/表 19

图1

图2

图3

图4

图5

图6

图7

图8

图9

图10

图11

图12

表1

图13

图14

表2

图15

图16

图17

参考文献 62

[1]	CLAFFY K , CLARK D . Workshop on Internet economics(WIE2014)report[J]. ACM SIGCOMM Computer Communication Review, 2015,45(3): 43-48.
[2]	WILLINGER W , ROUGHAN M . Internet topology research redux[M]. ACM SIGCOMM eBook: Recent Advances in NetworkingPress, 2013.
[3]	DONNET B , FRIEDMAN T . Internet topology discovery:a survey[J]. IEEE Communications Surveys and Tutorials, 2007,9(4): 2-15.
[4]	LUCKIE M , DHAMDHERE A , HUFFAKER B ,et al. Bdrmap:inference of borders between IP networks[C]// ACM SIGCOMM Conference on Internet Measurement. ACM, 2016: 381-396.
[5]	GIOTSAS V , DHAMDHERE A , CLAFFY K . Periscope:unifying looking glass querying[C]// Passive and Active Measurement Conference. Springer, 2016: 177-189.
[6]	CHANDRASEKARAN B , SMARAGDAKIS G , BERGER A ,et al. ,A server-to-server view of the Internet[C]// ACM International Conference on emerging Networking EXperiments and Technologies. ACM, 2015: 1-13.
[7]	GIOTSAS V , LUCKIE M , HUFFAKER B ,et al. Inferring complex AS relationships[C]// ACM SIGCOMM Conference on Internet Measurement. ACM, 2014: 23-30.
[8]	HUFFAKER B , FOMENKOV M , CLAFFY K . DRoP:DNS-based router positioning[J]. ACM SIGCOMM Computer Communication Review, 2014,44(3): 5-13.
[9]	KING A , HUFFAKER B , DAINOTTI A ,et al. A coordinated view of the temporal evolution of large-scale Internet events[J]. Computing, 2014,96(1): 53-65.
[10]	GIOTSAS V , ZHOU S , LUCKIE M ,et al. Inferring multilateral peering[C]// ACM SIGCOMM Conference on Emerging Networking Experiments and Technologies. ACM, 2013: 247-258.
[11]	GIOTSAS V , SMARAGDAKIS G , HUFFAKER B ,et al. Mapping peering interconnections to a facility[C]// ACM International Conference on Emerging Networking Experiments and Technologies. ACM, 2015: 1-13.
[12]	AGER B , MüHLBAUER W , SMARAGDAKIS G ,et al. Web content cartography[C]// ACM SIGCOMM Conference on Internet Measurement Conference. ACM, 2011: 585-600.
[13]	CASTRO I , CARDONA J C , GORINSKY S ,et al. Remote peering:more peering without internet flattening[C]// ACM International Conference on Emerging Networking Experiments and Technologies. ACM, 2014: 185-198.
[14]	BREITBART Y , GAROFALAKIS M , MARTIN C ,et al. Topology discovery in heterogeneous IP networks[C]// IEEE International Conference on Computer Communications. IEEE, 2000: 265-274.
[15]	BEJERANO Y . Taking the skelons out of the closets:a simple and efficient topology discovery scheme for large Ethernet[J]. ACM/IEEE Transactions on Networking, 2009,17(5): 1385-1398.
[16]	HADDADI H , RIO M , IANNACCONE G ,et al. Network topologies:inference,modeling and generation[J]. IEEE Communication Surveys Tutorials, 2008,10(2): 48-69.
[17]	DONNET B , FRIEDMAN T . Internet topology discovery:a survey[J]. IEEE Communications Surveys and Tutorials, 2007,9(4): 2-15.
[18]	SPRING N , MAHAJAN R , WETHERALL D ,et al. Measuring ISP topologies with rocketfuel[J]. IEEE/ACM Transactions on Networking, 2004,12(1): 2-16.
[19]	CLAFFY K C . Internet tomography[J]. Nature,Web Matter, 1999.
[20]	GOVINDAN R , TANGMUNARUNKIT H . Heuristics for Internet map discovery[C]// IEEE International Conference on Computer Communications.IEEE. 2000: 1371-1380.
[21]	PANSIOT J , GRAD D . On routes and multicast trees in the Internet[J]. ACM SIGCOMM Computer Communication Review, 1998,28(1): 41-50.
[22]	SPRING N , WETHERALL D , ANDERSON T . ScrIPtroute:a public Internet measurement facility[C]// USENIX Symposium on Internet Technologies and Systems. USENIX, 2003: 225-238.
[23]	SPRING N , MAHAJAN R , WETHERALL D . Measuring ISP topologies with rocketfuel[J]. ACM SIGCOMM Computer Communication Review, 2002,32(4): 133-145.
[24]	KEYS K . IP alias resolution techniques:technical report[R]. Cooperative Association for Internet Data Analysis,[2009-01-19].
[25]	GRAILET J F , DONNET B . Towards a renewed alias resolution with space search reduction and IP fingerprinting[C]// Network Traffic Measurement and Analysis Conference. IEEE, 2017: 1-9.
[26]	PANSIOT J , GRAD D . On routes and multicast trees in the internet[J]. ACM SIGCOMM Computer Communication Review, 1998,28(1): 41-50.
[27]	赵洪华, 白华利, 陈鸣 ,等. 路由器级拓扑发现中的别名过滤算法[J]. 西安电子科技大学学报, 2009,36(1): 177-182.
	ZHAO H H , BAI H L , CHEN M ,et al. Alias filter algorithm in router level topology discovery[J]. Journal of Xi’dian University, 2009,36(1): 177-182.
[28]	赵洪华, 白华利, 陈鸣 ,等. 别名解析中的别名过滤技术[J]. 软件学报, 2009,20(8): 2280-2288.
	ZHAO H H , BAI H L , CHEN M ,et al. Alias filtering technique in alias resolution[J]. Journal of Software, 2009,20(8): 2280-2288.
[29]	SHERWOOD R , SPRING N . Touring the Internet in a TCP sidecar[C]// ACM SIGCOMM Conference on Internet Measurement. ACM, 2006: 339-344.
[30]	SHERRY J , KATZ-BASSETT E , PIMENOVA M ,et al. Resolving IP aliases with prespecified timestamps[C]// ACM SIGCOMM Conference on Internet Measurement. ACM, 2010: 172-178.
[31]	GUNES M H , SARAC K . Analytical IP alias resolution[C]// IEEE International Conference on Conference. IEEE, 2006: 459-464.
[32]	SPRING N , DONTCHEVA M , RODRIG M ,et al. How to resolve IP aliases[R]. The University of Washington:Department of Computer Science and Engineering, 2004.
[33]	SHERWOOD R , BENDER A , SPRING N . Discarte:a disjunctive Internet cartographer[C]// ACM SIGCOMM Conference on Data Communication. ACM, 2008: 303-314.
[34]	SPINELLI L , CROVELLA M , ERIKSSON B . AliasCluster:a lightweight approach to interface disambiguation[C]// IEEE International Conference on Computer Communications. IEEE, 2013: 3333-3338.
[35]	GARCIA-JIMENEZ S , MAGANA E , MORATO D ,et al. Pamplona-traceroute:topology discovery and alias resolution to build router level Internet maps[C]// Global Information Infrastructure Symposium. GIIS, 2013: 1-8.
[36]	MALKIN G . Traceroute using an IP option[R]. RFC1393,(1993-02-02)[2018-09-07].
[37]	BENDER A , SHERWOOD R , SPRING N . Fixing Ally’s growing pains with velocity modeling[C]// ACM SIGCOMM Conference on Internet Measurement. ACM, 2008: 337-342.
[38]	KEYS K , HYUN Y , LUCKIE M ,et al. Internet-scale IPv4 alias resolution with MIDAR[J]. IEEE/ACM Transactions on Networking, 2013,21(2): 383-399.
[39]	MARCHETTA P , PERSICO V . Pythia:yet another active probing technique for alias resolution[C]// ACM Conference on Emerging Networking Experiments and Technologies. ACM, 2013: 229-234.
[40]	POSTEL J . DARPA Internet program protocol specification[R]. RFC 791,(1981-09-01)[2018-09-07].
[41]	高歌 . 路由器别名解析方法研究[D]. 哈尔滨:黑龙江大学, 2012.
	GAO G . Research on router alias resolution method[D]. Harbin:Heilongjiang University, 2012.
[42]	MARCHETTA P , MERINDOL P , DONNET B ,et al. Quantifying and mitigating IGMP filtering in topology discovery[C]// Global Communications Conference. IEEE, 2012: 1871-1876.
[43]	GUNES M , SARAC K . Resolving IP aliases in building traceroute-based internet maps[J]. IEEE/ACM Transactions on Networking, 2009,17(6): 1738-1751.
[44]	KEYS K . Internet-scale IP alias resolution techniques[J]. ACM SIGCOMM Computer Communication Review, 2010,40(1): 50-55.
[45]	LONE Q , LUCKIE M , KORCZY?SKI M ,et al. Using loops observed in traceroute to infer the ability to spoof[C]// International Conference on Passive ＆ Active Network Measurement. Springer, 2017: 229-241.
[46]	TOZAL M E , SARAC K . Palmtree:an IP alias resolution algorithm with linear probing complexity[J]. Computer Communications, 2011,34(5): 658-669.
[47]	TOZAL M.E , SARAC K . Subnet level network topology mapping[C]// IEEE International Performance Computing and Communications Conference. IEEE, 2011: 1-8.
[48]	BONICA R , KUMARI W , BUSH R ,et al. IPv6 fragment header deprecated Internet draft[S].(2013-07-01)[2018-09-07].
[49]	ORSINI C , KING A , GIORDANO D ,et al. BGPStream:a software framework for live and historical BGP data analysis[C]// ACM SIGCOMM Conference on Internet Measurement. ACM, 2016: 429-444.
[50]	WADDINGTON D G , CHANG F , VISWANATHAN R ,et al. Topology discovery for public IPv6 networks[J]. ACM SIGCOMM Computer Communication Review, 2003,33(3): 59-68.
[51]	QIAN S , WANG Y , XU K . Utilizing destination options header to resolve IPv6 alias resolution[C]// The Global Communications Conference. IEEE, 2010: 1-6.
[52]	BEVERLY R , BRINKMEYER W , LUCKIE M ,et al. IPv6 alias resolution via induced fragmentation[C]// International Conference on Passive ＆ Active Network Measurement. IEEE, 2013: 155-165.
[53]	LUCKIE M , BEVERLY R , BRINKMEYER W ,et al. Speedtrap:Internet-scale IPv6 alias resolution[C]// ACM SIGCOMM on Internet Measurement Conference. ACM, 2013: 119-126.
[54]	PADMANABHAN R , LI Z , LEVIN D ,et al. UAv6:alias resolution in IPv6 using unused addresses[C]// International Conference on Passive＆ Active Network Measurement.Springer. 2015: 136-148.
[55]	QIAN S , XU M , QIAO Z ,et al. Route positional method for IPv6 alias resolution[C]// International Conference on Computer Communications ＆ Networks. Springer, 2010: 1-6.
[56]	DURUMERIC Z , WUSTROW E , HALDERMAN J A . ZMap:fast internet-wide scanning and its security applications[C]// USENIX Conference on Security. USENIX Association, 2013: 605-620.
[57]	GRAHAM R D . MASSCAN:Mass IP port scanner[R]., GitHub,(2016-06-06)[2018-09-07].
[58]	MURDOCK A , LI F , BRAMSEN P ,et al. Target generation for internet-wide IPv6 scanning[C]// ACM Internet Measurement Conference. ACM, 2017: 242-253.
[59]	MURDOCK A , LI F , BRAMSEN P ,et al. Target generation for Internet-wide IPv6 scanning[C]// ACM Internet Measurement Conference. ACM, 2017: 242-253.
[60]	FIEBIG T , BORGOLTE K , HAO S ,et al. Something from nothing (there):collecting global IPv6 datasets from DNS[C]// International Conference on Passive ＆ Active Network Measurement. Springer, 2017: 30-43.
[61]	SALUTARI F , CICALESE D , ROSSI D J . A closer look at IPID behavior in the wild[C]// International Conference on Passive ＆ Active Network Measurement. Springer, 2018: 243-254.
[62]	MARCHETTA P , DE DONATO W , PESCAPé A . Detecting third-party addresses in traceroute traces with IP timestamp option[C]// International Conference on Passive ＆ Active Network Measurement . Springer, 2013: 21-30.

跳数	SMU到Yale （正向路径）	Yale到SMU到（反向路径）
1	129.119.39.1	129.119.223.249
2	129.119.0.249	129.119.0.250
3	206.223.141.89	206.223.141.90
4	206.223.141.70	206.223.141.69
5	198.32.8.34	198.32.8.33
6	198.32.8.66	198.32.8.65
7	198.32.8.84	198.32.8.85
8	192.5.89.9	192.5.89.10
9	192.5.89.33	192.5.89.34
10	192.5.89.70	192.5.89.69
11	130.132.1.19	130.132.1.100
12	130.132.252.244	130.132.23.1

算法名称	原理	准确性	完整性	开销	简易性	协议	适用场景	发布时间
Mercator^[20]	同源地址	高	较低	O(n²)	容易	IPv4	集中，全网络	2000
iffinder^[21]	同源地址	高	较低	O(n²)	容易	IPv4	集中，全网络	2001
Alas^[50]	同源地址	高	较低	O(n²)	容易	IPv4+IPv6	集中，全网络	2001
Ally^[23]	同源地址+IPID	中	较低	O(n²)	较容易	IPv4	集中，全网络	2002
DASAR^[32]	DNS解析	高	较低	O(n²)	容易	IPv4	集中，全网络	2004
AAR^[31]	图论	中	高	O(n²)	难	IPv4	分布式，全网络	2006
Passenger^[29]	RR	中	中	O(n²)	难	IPv4	集中，网络边缘	2006
RadarGun^[37]	IPID	中	中	CO(n)	较容易	IPv4	集中，全网络	2008
DisCarte^[33]	RR	高	中	O(n²)	难	IPv4	集中，网络边缘	2008
APAR^[43]	图论	中	高	O(n²)	难	IPv4	分布式，全网络	2009
Kapar^[44]	图论	中	高	O(n²)	难	IPv4	分布式，全网络络	2010
Timestamp^[49]	时间戳	高	低	O(n²)	简单	IPv4	分布式，网络边缘	2010
Palmtree^[46]	综合	高	低	O(n)	简单	IPv4	集中，整个网络	2011
Pythia^[39]	时间戳	高	低	O(n²)	简单	IPv4	分布式，网络边缘	2013
MIDAR^[38]	IPID	中	中	CO(n²)	较容易	IPv4	集中，部分网络	2013
AliasCluster^[34]	图论	中	中	CO(n²)	容易	IPv4	分布式，全网络	2013
Pamplona-traceroute^[35]	IPID	高	高	Cn+O(n²)	难	IPv4	分布式，全网络	2013
TreeNet^[25]	综合	高	低	Cn+O(n²)	复杂	IPv4	集中，部分网络	2017
RMP^[51]	同源地址	中	较低	O(n²)	容易	IPv4+IPv6	集中，部分网络	2010
Mrinfo+^[41]	IGMP	高	低	O(n)	简单	IPv4+IPv6	集中，部分网络	2012
TBT^[52]	IPID	高	高	CO(n²)	难	IPv6	集中，部分网络	2013
Speedtrap^[53]	IPID	高	高	CO(n²)	难	IPv6	集中，部分网络	2013
UAv6^[54]	ICMP	高	中	CO(n)	简单	IPv6	分布式，部分网络	2015

别名解析技术研究进展

Research on the IP alias resolution technology

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 19

参考文献 62

相关文章 15

Metrics

推荐阅读 0

[1]	李竟博, 马礼, 李阳, 傅颖勋, 马东超. 感传算协同工业互联网优化设计[J]. 通信学报, 2023, 44(6): 12-22.
[2]	舒坚, 史佳伟, 刘琳岚, Manar Al-Kali. 基于时空卷积的机会网络拓扑预测[J]. 通信学报, 2023, 44(3): 145-156.
[3]	金伟, 李凤华, 余铭洁, 郭云川, 周紫妍, 房梁. 面向HDFS的密钥资源控制机制[J]. 通信学报, 2022, 43(9): 27-41.
[4]	孙雁飞, 尹嘉峥, 亓晋, 胡筱旋, 陈梦婷, 董振江. 基于动态图嵌入的车联网拓扑控制[J]. 通信学报, 2022, 43(6): 133-142.
[5]	唐盼, 林佳欣, 张建华, 田磊, 常钊玮, 夏亮, 王启星. 面向6G的太赫兹信道反射特性研究[J]. 通信学报, 2022, 43(5): 102-109.
[6]	张汝云, 肖戈扬, 单麒赫, 邹涛, 李丹, 滕菲. 多模态网络下多智能体协同控制的通信拓扑重构方法[J]. 通信学报, 2022, 43(4): 50-59.
[7]	杨宏宇, 袁海航, 张良. 基于攻击图的主机安全评估方法[J]. 通信学报, 2022, 43(2): 89-99.
[8]	霍如, 程祥凤, 孙闯, 汪硕, 黄韬, F.Richard Yu. 区块链网络拓扑优化和转发策略设计[J]. 通信学报, 2022, 43(12): 89-100.
[9]	弋浩凡, 官科, 何丹萍, 艾渤, 赖峥嵘, 钟章队. 太赫兹电波传播及信道特性[J]. 通信学报, 2022, 43(1): 34-48.
[10]	安常青, 刘玉家, 王会, 郑志延, 喻涛, 王继龙. 基于拓扑分析的区域级网络抗毁性研究[J]. 通信学报, 2021, 42(11): 145-158.
[11]	丁绍虎,齐宁,郭义伟. 基于M-FlipIt博弈模型的拟态防御策略评估[J]. 通信学报, 2020, 41(7): 186-194.
[12]	王继龙,庄姝颖,缪葱葱,安常青. 网络空间信息系统模型与应用[J]. 通信学报, 2020, 41(2): 74-83.
[13]	邱雪松,黄徐川,李文萃,李温静,郭少勇. 面向大规模时间敏感网络的分组调度机制[J]. 通信学报, 2020, 41(11): 124-131.
[14]	张兴兰,尹晟霖. 可变融合的随机注意力胶囊网络入侵检测模型[J]. 通信学报, 2020, 41(11): 160-168.
[15]	杨增印,李贺武,吴茜,吴建平,刘君. 天地一体化信息网络域间协议实验平台[J]. 通信学报, 2019, 40(5): 1-12.