DDoS攻击已经成为当今网络安全的最大隐患。文中提出了基于IP地址分段的DDoS路由追踪技术,分析了边界路由器IP地址重叠分段方法以及在地址重构过程中误报的产生,阐述了降低误报率的方法。最后,通过在模拟环境下,验证了该路由追踪技术误报率低、所需边界路由器少、地址重建复杂度小。 DDoS attacks have become the biggest hidden danger of today’s network security. In this paper, we propose a DDoS routing tracing technique based on IP address segmentation, analyze the method of overlapping segmentation of border router IP address and the generation of false positives in the process of address reconstruction. Finally, under the simulation environment, it is verified that the false alarm rate of this route tracing technology is low, the number of border routers required is small, and the complexity of address reconstruction is small.