一种基于多属性决策的DDoS防护措施遴选方法  

Method of DDo S Countermeasure Selection Based on Multi-Attribute Decision Making

作　　者：黄亮[1] 冯登国[1] 连一峰[1] 陈恺[2] 张颖君[1] 刘玉岭[1] 

机构地区：[1]中国科学院软件研究所可信计算与信息保障实验室,北京100190 [2]中国科学院信息工程研究所,北京100195

出　　处：《软件学报》2015年第7期1742-1756,共15页Journal of Software

基　　金：国家高技术研究发展计划(863)(SQ2013GX02D01211);国家自然科学基金(61100226;61303248);北京市自然科学基金(4122085;4144089);"十二五"国家科技支撑计划(2012BAK26B01)

摘　　要：DDo S攻击是网络中最大的威胁之一,选取合适的防护措施,能够更加有效地保护目标网络和目标系统.现有的评价方法对于防护措施选择的指导性不足.针对该问题,首先构建了面向DDo S攻击的防护措施遴选模型(DCSM).在此基础之上,提出基于多属性决策的DDo S防护措施遴选算法.以多属性决策方法综合考虑各方面评估指标;从攻防两方面,以基于历史攻击偏好的方法和熵权法计算重要性权重,消除了传统评价方法中人为指定权重带来的主观性影响.提出的方法为防护措施的选择提供了参考,并通过模拟实验验证了方法的适用性和有效性.DDoS is one of the biggest threat in the network. Using the proper countermeasure will notably improve the security level of the target network and/or target system. Existing security evaluation methods don＇t provide sufficient support for countermeasure selection. To solve the problem, this paper builds a DDoS countermeasure selection model （DCSM）, and then proposes the DDoS countermeasure selection method. The method not only takes advantage of multi-attribute decision making theory to evaluate multi- dimension metrics, but also uses historical attack preference based method and entropy method to calculate the weight from both attack and defense perspectives, thus reducing the subjective factors in conventional methods. The correctness and the applicability of the method are validated by the experiments.

关 键 词：多属性决策 DDo S 安全防护 措施遴选 安全评估 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]