Study of IP Dynamic Masquerading Model
IP动态伪装模型研究

The discipline of IP masquerading can help to puzzle the attacker's attention and prevent the attacker from getting the valuable information from the IP packets which are identified by IP address. This paper presents an IP dynamic masquerading model to extend the masqueraded IP number that the network session can chose by sharing and competing these IPs. Our main contribution is in presenting; (1 )the definition of masqueraded degree for a computer in sometime by the number of masqueraded IP divide the number of the network session; (2) the algorithm for maintaining the queue of masqueraded IP, changing their states and competing the masqueraded IP by sending ARP messages; Using DivertSocket to monitor the packets, and basing Netfilter and IPTables, we design an experimental system IPDM based on this model, and satisfactory results are obtained.