Abstract: IP address security is always a critical Internet security issue. As the transition from IPv4 to IPv6, multiple allocation modes of IP address, IPv6 translation techniques and IP spoofing increase the uncertainty of IP address of the host and the host has multiple IP addresses, which makes IP address resource more insecure. The emerging IPv6 home network, small enterprise network and campus network interconnect with traditional IPv4 network, which is typical and inevitable IPv6 translation scenario, and traditional IP traceback techniques cannot directly be applied to these scenarios. Therefore, this paper presented a new approach to solve IP traceback issue under these scenarios, which is able to go across the gateway that interconnects between IPv4 network and IPv6 network, and makes the destination network knowable for the source network. The traceback method guarantees the Internet fundamental resource safe.

Key words: IP address management, IP traceback, IPv6 transition, packet verification, IPv6 translation mechanism

摘要： IP地址安全一直是互联网面临的核心问题，在IPv6过渡时期，多种IP地址分配方式，IPv6过渡技术和IP欺骗引起的IP地址不确定性向IP地址资源安全提出了挑战。新兴IPv6家庭网络、小企业网、校园网与传统IPv4网络互联互通的IPv6翻译场景是典型的IPv6过渡场景，然而，传统的IP追溯技术无法直接应用于IPv6翻译场景。基于这种现状，提出一种IP追溯方案来解决IPv6翻译场景下的IP追溯问题，该方案打通了IPv6翻译网关，实现了目的网络对源网络的可知性，进而保证了互联网的IP地址资源安全。

关键词: IP地址管理, IP追溯, IPv6过渡, 数据包验证, IPv6翻译机制