网络融合边界的电信DoS攻击检测  

Detect telecommunication DoS attacks at network convergence boundary

作　　者：邱俊沙[1,2] 梅林[3] 汪孔林[1] 胡光岷[1] 

机构地区：[1]电子科技大学宽带光纤传感与通信教育部重点实验室 [2]中国人民解放军94654部队 [3]川庆物探公司信息中心

出　　处：《计算机应用研究》2011年第12期4631-4634,共4页Application Research of Computers

基　　金：国家"863"计划资助项目(2008AA011002)

摘　　要：为了检测网络融合边界的电信拒绝服务攻击,首先针对攻击的类型分别提出了基于呼叫统计或流量信号分析的检测方法,并采用分步骤的策略设计了检测系统,将两种检测算法分别应用于粗检测步骤,再通过精检测步骤确认攻击并找出攻击源。模拟实验结果表明,该方案能够有效地检测出典型的攻击,并能够实时在线检测,具有良好的实用价值,为应对网络融合所带来的新安全问题提供了一种解决方案。First this paper proposed two detection methods based on either call statistic or traffic signal analysis respectively according to the attack types, then designed a detection system with two stage strategy, which comprised rough detection applying the two methods and precise detection to confirm the attack and find out the source. Simulation shows that the scheme is effective and real-time in detecting typical attacks and can be practically applied, which provides a solution to deal with the new security issue introduced by network convergence.

关 键 词：融合网络边界 拒绝服务 攻击检测 呼叫统计 流量信号分析 

分 类 号：TN918.91[电子电信—通信与信息系统]