一类慢速拒绝服务攻击的防御方法  

A method for defending low-rate denial of service attacks

作　　者：董阔[1] 杨寿保[1] 

机构地区：[1]中国科学技术大学计算机科学技术系,安徽合肥230026

出　　处：《中国科学技术大学学报》2010年第1期103-108,共6页JUSTC

基　　金：国家自然科学基金(60673172);安徽省自然科学基金(070412045)资助

摘　　要：与高速率的拒绝服务攻击相比,慢速拒绝服务攻击难以被现有的拒绝服务攻击检测工具检测出来,其隐蔽性更高.通过分析慢速拒绝服务攻击在不同网络环境中对网络性能的影响,提出使用动态调整超时重传定时器的策略来防御此类攻击.实验表明,此类动态调整策略可有效抵御慢速拒绝服务攻击,与当前网络所使用的策略相比,在攻击周期小于2 s时,网络吞吐量提升了300%以上.Compared with high-rate denial of service attacks,low-rate denial of service attack is hard to detect by the existing intrusion detection systems,because it is much more concealed.The network performance with low-rate attacks in different environments was analyzed;two novel dynamic adjusting strategies for retransmission timeout were also proposed.Experiments indicate that the proposed method can effectively fight off low-rate denial of service attacks.Compared with the strategy currently used on the Internet,it can enhance the network throughput above 300% when the attack period is less than 2 seconds.

关 键 词：慢速拒绝服务攻击 拥塞控制 动态调整 超时重传定时器 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]