移动Ad Hoc网中一种路由DoS攻击的分布式防御机制  

A Distributed Defending Mechanism Against Routing DoS Attack in Mobile Ad Hoc Networks

作　　者：宋建华[1] 马传香[2] 洪帆[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,武汉430074 [2]湖北大学数学与计算机科学学院,武汉430062

出　　处：《微计算机应用》2007年第8期814-817,共4页Microcomputer Applications

基　　金：国家自然科学基金(60603069);湖北省自然科学基金(2005ABA243);湖北省教育厅科学研究计划项目(D200610003)

摘　　要：在移动AdHoc网中,路由安全值得关注。恶意路由泛洪攻击会造成对正常节点的DoS攻击以及对网络资源的消耗。路由请求泛洪攻击是一类易于发起的典型泛洪攻击,但由于恶意节点除了进行路由发现的次数比其他节点频繁以外,其他操作与正常节点没有大的差别,所以这种攻击很难被检测出来。提出了一种分布式的过滤机制来减轻网络性能的下降,防御这一类的DoS攻击。本方案对于已有的路由结构和功能只需要做较小的修改,且不需要额外的网络带宽。In Mobile Ad hoc Networks （ MANET）, routing security needs to be addressed. Malicious routing flooding can lead to Denial of Service （DoS） Attacks to genuine nodes and the exhausting of the network resources. The attack of initiating / forwarding fake Route Requests （RREQs） flooding is a typical kind of malicious routing flooding and is easy to launch. This type of attack is hard to detect since malicious nodes have no difference with normal nodes in all aspects except that they do route discoveries much more frequently than other nodes. A distrusted filtering mechanism is proposed to defend this attack and reduce the loss of throughput. The proposed mechanism needs minas modification to the existed routing structure and does not use any additional network bandwidth.

关 键 词：移动自组网 拒绝报务攻击 路由请求泛洪攻击 

分 类 号：TN929.5[电子电信—通信与信息系统] TP393.08[电子电信—信息与通信工程]