基于资源消耗的服务拒绝态势评估方法  

DoS attack situation assessment method based on resource consumption

作　　者：刘宇华[1] 张红旗[1] 杨英杰[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2012年第10期3772-3776,共5页Computer Engineering and Design

基　　金：河南省基础与前沿技术研究计划基金项目(102300413203)

摘　　要：为了全面掌握网络遭受资源耗尽型DoS攻击的影响程度,辅助网络管理员认识和防范该类攻击,提出了基于资源消耗度的攻击态势评估方法。方法采用网络安全态势感知技术,建立了以层次分析法为核心的态势评估模型,可对待评网络中海量的性能数据进行处理,得到网内资源消耗情况,并以此反映遭受攻击时的服务拒绝态势。该方法还应用了权值修正算法,增强了算法的客观性,减小了误差。实验结果表明,提出的评估方法能够有效反映攻击态势,为网络管理员制定响应策略提供帮助和依据。In order to grasp the effects of the resource depletion DoS attacks and assist network administrators to understand and prevent such attacks, a DoS situation assessment method based on resource consumption is proposed. This method applies net- work security situational awareness technology to establish a situation assessment model with analytic hierarchy process. Massive performance data is processed to build the situation of DoS. The weight correction algorithm is applied to enhance the objectivity and reduces the error Experiments show that the proposed evaluation method can reflect the attack posture effectively, and pro vide help and basis for network administrators to develop response strategies.

关 键 词：资源耗尽 DOS攻击 资源消耗 态势评估 网络安全态势感知 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]