面向DDoS的容侵参数研究  

Research on intrusion tolerance parameters facing DDoS attacks

作　　者：张兆心[1] 方滨兴[1] 杜跃进[1] 李斌[1] 胡萍[1] 

机构地区：[1]哈尔滨工业大学国家计算机网络与信息安全重点实验室,哈尔滨150001

出　　处：《高技术通讯》2008年第11期1123-1129,共7页Chinese High Technology Letters

基　　金：863计划((2006AA01Z451;2007AA010503)

摘　　要：通过对分布式拒绝服务(DDoS)攻击原理的深入研究,攻击参数的形式化分析和推导,以及仿真实验,揭示了 DDoS 攻击与带宽、CPU 处理能力、内存、攻击速度、TCP 连接缓冲池等参数之间的关系,指出了承载 N 倍于处理速度的 DDoS 攻击所需的系统指标,提出了针对 DDoS 的容侵参数、CPU 处理能力、内存和 TCP 连接缓冲池,为 DDoS 攻击的防御打下了坚实的基础。Based on analysis of the DDoS（distributed denial of service） attack mechanisms, formal deduction of attacking parameters and simulation study of DDoS attack, the paper gives the functional relationship between DDoS attacking effect and impacting parameters, such as network bandwidth, CPU processing ability, memory size, attacking speed, TCP connection buffer size. The systematic requirements to stand DDoS attack which is N times of the CPU processing ability are pointed out. Also, the intrusion-tolerance parameters against DDoS attack are proposed, including CPU processing ability, memory size and TCP connection buffer size. The proposal of these requirements and parameters can greatly improve the ability to defend computer systems against DDoS attack.

关 键 词：形式化 DDOS攻击 容侵参数 连接缓冲池 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311.131[自动化与计算机技术—计算机科学与技术]