BGP-SIS:一种域间路由系统BGP-LDoS攻击威胁传播模型  

BGP-SIS:a BGP-LDo S attack threat propagation model for inter domain routing system

作　　者：苗甫 王振兴[1] 郭毅[1] 张连成[1] 王禹[1] 

机构地区：[1]信息工程大学,郑州450001

出　　处：《计算机应用研究》2017年第12期3735-3739,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(61402525;61402526;61472215;61502528);国家"863"计划资助项目(2012AA012902)

摘　　要：针对域间路由系统的低速率拒绝服务攻击(low-rate denial of service against BGP,BGP-LDo S)通过引起级联失效造成域间路由系统整体瘫痪,研究了BGP-LDo S攻击威胁下域间路由系统级联失效的传播机理、影响因素是应对和防范该攻击的基础。通过分析域间路由系统的结构特性以及BGP-LDo S攻击过程,提出一种基于传染病动力学的BGP-LDo S威胁传播模型BGP-SIS。将系统中每个节点的状态划分为易感态、感染态,利用传染病动力学模型SIS对攻击所造成的级联失效过程进行描述,推导攻击威胁下域间路由系统的最终状态。利用仿真实验对模型及推论的有效性进行验证,实验结果表明BGP-SIS能够有效描述和预测BGP-LDo S攻击下域间路由系统级联失效的传播规律,可为域间路由系统检测和防御BGP-LDo S攻击提供借鉴和参考。Low-rate denial of service against BGP( BGP-LDoS) can cause cascading failure in the inter domain routing system and paralyze the system as a whole. Research on the communication mechanism and influence factors of cascading failure of the inter domain routing system under BGP-LDoS attack is the foundation of the response and prevention of the attack. Based on the analysis of the structural characteristics of the inter domain routing system and the BGP-LDoS attack process,this paper proposed BGP-LDoS threat propagation model BGP-SIS based on dynamics of infectious diseases. It subdivided the state of each node in the system into the susceptible and infected states. It described the cascading failure process caused by the attack using the dynamic epidemics models SIS. And it derived the final state of the inter domain routing system. The validity of the model and the inference were verified by the simulation experiment. The experimental results show that BGP-SIS can effectively describe and predict the propagation rule of cascading failure of inter domain routing system under BGP-LDoS attack. It also can be used to provide reference and reference for inter domain routing system to detect and defend BGP-LDoS attacks.

关 键 词：低速率拒绝服务 级联失效 传染病 动力学 域间路由 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]