发布订阅系统中的拒绝服务攻击  

DOS attacks in publish/subscribe systems

作　　者：张圣栋[1] 沈锐[1] 

机构地区：[1]国防科技大学计算机学院,并行与分布处理国防科技重点实验室,长沙410073

出　　处：《计算机工程与应用》2011年第25期26-29,共4页Computer Engineering and Applications

基　　金：国家重点基础研究发展规划(973)(No.2011CB302603);国家自然科学基金(No.60725206)~~

摘　　要：针对发布订阅系统中的拒绝服务攻击,提出一种有效的订阅合并方法。不同于现有订阅合并方法,该方法要求合并的订阅具有一定的相似性,因而可以减少合并后事件转发带宽开销。订阅相似性判断根据它在每个属性上约束范围的大小和位置,采用两阶段的归组算法把相似订阅归组,把处于同一组的订阅合并。理论分析表明,该方法时间复杂度低,可以根据节点负载情况动态控制合并粒度,因而可以有效解决拒绝服务攻击的问题。实验结果表明,该方法只增加少量的事件转发带宽开销。A novel subscription merging method is proposed to deal with the Denial Of Service（DOS）attacks in publish/subscribe systems.Different from the current methods,the proposed method only merges the similar subscriptions.Thus it can reduce the bandwidth cost during event forwarding after merging compared to current methods.The judgment of the similarity of subscriptions depends on the size and the location of the constraint range of each attribute of the subscription,and grouping mechanism with two steps to group similar subscriptions is proposed.Theoretically analysis shows that the proposed method has low time complexity and can control the merging granularity dynamically according to the load of nodes,thus can efficiently deal with DOS attacks.The results from the experiments show that the proposed method only increases a little bandwidth cost during event forwarding.

关 键 词：发布订阅系统 拒绝服务攻击 订阅合并 时间复杂度 带宽开销 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]