基于Gnutella协议的P2P网络中DoS攻击防御机制  

The study on DoS attacks the mechanism of defending in P2P network based on Gnutella agreement

作　　者：乐光学[1] 

机构地区：[1]湖南怀化学院计算机系,湖南长沙418000

出　　处：《微电子学与计算机》2005年第8期26-31,35,共7页Microelectronics & Computer

基　　金：国家自然科学基金项目资助(60273075);湖南省教育厅重点基金资助(03A036)

摘　　要：对基于Gnutella协议的P2P计算网络实施DoS攻击的特征进行了详细分析,通过设置攻击容忍度和防御起点,提出了一种简单的基于特征的DoS攻击防御策略,运用基于贝叶斯推理的异常检测方法发现攻击,使系统能根据DoS攻击的强弱,自适应调整防御机制,维持网络的服务性能。仿真结果表明,本文提出的防御策略能有效的防御恶意节点对网络发动的DoS攻击,使网络服务的有效性达到98%,正常请求包被丢弃的平均概率为1.83%,预防机制平均时间开销仅占网络总开销的6.5%。This paper calculate to based on Gnutella agreement P2P network implement characteristic that DoS attack go on in detail analyzing. By setting up the attack tolerating degree and starting point with defending, a new kind of simple DoS attacks the tactics of defending based on characteristic is proposed. Use the abnormality detection method to find attack based on Bayes reasoning, he power enabled system to attack according to DoS, adjust the mechanism of defending in self-adaptation and maintain the service performance of the network. The simulation result shows, This paper put forward defend tactics can effective defend hostile node attack to DoS that network mobilize, and making the service efficiency of the network more than 98%, It is 1.83% that normal request packets the average probability abandoned, prevent mechanism average time expenses account for network of overhead only 6.5%.

关 键 词：对等网 DOS攻击 自适应攻击防御 贝叶斯推理 防御起点 攻击容忍度 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]