一种基于概率滑动窗口的应用层DoS攻击防御模型  

Probability-based sliding window model for defending against application layer DoS attack

作　　者：朱勇[1,2] 罗军舟[1] 李伟[1] 王鹏[1] 曲延盛[1] 

机构地区：[1]东南大学计算机科学与工程学院,江苏南京211189 [2]南京陆军指挥学院,江苏南京210045

出　　处：《解放军理工大学学报（自然科学版）》2012年第1期34-40,共7页Journal of PLA University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(60903161;61003257;61070188;61003311);国家973计划资助项目(2010CB328104);教育部高等学校博士点学科专项科研基金资助项目(200802860031;20110092130002);江苏省自然科学基金资助项目(BK2008030);江苏省网络与信息安全重点实验室资助项目(BM2003201);计算机网络和信息集成教育部重点实验室资助项目(93K-9)

摘　　要：网络上种类繁多的服务面临着复杂且不安全的生存环境,多种因素威胁着服务的生存,应用层DoS攻击就是其中的重要因素之一。然而,当前防御应用层DoS攻击的方法存在着对合法用户请求的误判,需要额外的硬件设备支持和难以抵御某些低速率攻击等不足。为此,提出了一种全新的应用层DoS攻击防御模型——基于概率的滑动窗口模型PBSWM(probability-based sliding window model)。该模型位于应用层,利用滑动窗口机制控制客户端发送的请求速率和服务器端接收的负载总量,利用概率发送控制在源端阻滞攻击者发送引发较大负载的请求,利用概率接受控制防止来自少量客户的请求占用系统的大部分应用资源。实验结果表明,该模型能够达到降低攻击损害、保障服务生存的目的。The varied kinds of services are facing a complicated and unsafe survival environment. The application layer DoS attack is one of the most serious factors that threaten the service survivability. In the research on defense against it, some defects have been found, such as false positive, the need to extra hardware devices, and shortage of defense against the low-rate attack. A novel probability-based sliding window model （PBSWM） was proposed to defend against the application layer DoS attack. PBSWM, deployed in the application layer, uses the sliding window to limit the client request rate and service load, probabilistic transmission control to prevent the high-workload request attack, and the admission control to mitigate occupation of much of the service queue by minority of users. Finally, the experiment results show that PBSWM can mitigate the attacks and improve service survivability.

关 键 词：基于概率的滑动窗口模型 应用层DoS攻击防御 服务可生存性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]