DDoS攻击下Ad hoc网络队列管理算法研究与仿真  

Research and simulation of three queue management algorithms in Ad hoc network under DDoS attack

作　　者：冯永[1] 姚龙海[1] 

机构地区：[1]解放军电子工程学院网络系,合肥230037

出　　处：《计算机应用研究》2012年第12期4648-4650,共3页Application Research of Computers

摘　　要：针对分布式拒绝服务攻击(DDoS)对于Ad hoc网络性能的影响进行了研究。在介绍三种经典网络队列管理算法——Drop-Tail、RED和REM的基础上,利用网络仿真软件NS2,分析比较了Ad hoc网络在遭受DDoS攻击时三种队列管理算法的防御能力。仿真表明,在中、轻度DDoS攻击下,主动式队列管理算法REM和RED较被动式队列管理算法Drop-Tail具有更强的防御能力,但在重度DDoS攻击下,三种队列管理算法性能均大幅下降。为有效提高Ad hoc网络对于DDoS攻击的防御能力,除采用主动式队列管理算法之外,应结合网络检测等其他防御机制。Concentrating on the influence of DDoS imposed on Ad hoc network,this paper introduced three classic queue management algorithms：Drop-Tail,RED and REM.Applying in Ad hoc network,it analysed and compared these algorithms with NS2 under DDoS attack.The result shows that the active queue management algorithms,like REM and RED,exhibit a stronger defense ability than the passive queue management algorithm like Drop-Tail under medium and small scale DDoS attack.But under large scale DDoS attack,all three algorithms don＇ t show enough ability against this attack.It means that other defense scheme like network detection must be integrated into security sheme to defeat DDoS attack.

关 键 词：分布式拒绝服务攻击 无线自组织网络 队列管理算法 网络仿真软件 防御策略 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP391.7[自动化与计算机技术—计算机科学与技术]