检索规则说明:AND代表“并且”;OR代表“或者”;NOT代表“不包含”;(注意必须大写,运算符两边需空一格)
检 索 范 例 :范例一: (K=图书馆学 OR K=情报学) AND A=范并思 范例二:J=计算机应用与软件 AND (U=C++ OR U=Basic) NOT M=Visual
作 者:陈世云[1] 刘渊[1] 王晓锋[2] Chen Shiyun;Liu Yuan;Wang Xiaofeng(School of Digital Media, Jiangnan University, Wuxi 214122 , Jiangsu, China;School of Internet of Things Engineering, Jiangnan University, Wuxi 214122 , Jiangsu, China)
机构地区:[1]江南大学数字媒体学院,江苏无锡214122 [2]江南大学物联网工程学院,江苏无锡214122
出 处:《计算机应用与软件》2016年第8期289-293,共5页Computer Applications and Software
基 金:国家自然科学基金项目(61103223);江苏省自然科学基金重点研究专项项目(BK2011003);江苏省2014年度普通高校研究生实践创新计划项目(SJLX_0524)
摘 要:低速率分布式拒绝服务攻击(LDDoS)正成为互联网的重要安全威胁之一。为更好地探索当前Internet存在的LDDoS隐患,以有效提升相应的防御策略,有必要研究面向Internet的LDDoS攻防策略。针对面向Internet骨干网的LDDoS攻击策略(CXPST)存在的攻击流量难以汇集于被攻击路径,从而导致攻击效果不明显的问题,提出一种优化的低速率分布式拒绝服务攻击部署策略。该策略基于路由信息,重点优化攻击流部署,从而能更有效地攻击关键路径。基于GTNet S进行仿真实验表明,与CXPST策略相比,所提出的优化LDDoS策略能有效提升低速率拒绝服务攻击的精确性,实际的攻击效果更为明显。基于所提出的策略,进一步探讨面向Internet骨干网LDDoS的防御策略。The low -rate d istrib u te d de n ia l o f service (L D D o S ) attack is becom ing one o f the m a jo r threats to the In te rn e t. In order to be tterexplore the p itfa lls o f LDDoS existed in cu rre n t In te rn e t and to e ffe ctive ly enhance the corresponding defense strategy, it is necessary to studythe In te rn e t-o rie n te d attack and defensive strategies o f LD D oS . A im in g at the defect o f C X P S T, an attack strategy o f LD D oS fo r In te rn e tbackbone n e tw o rk, th a t its attack tra ffic is hard to converge on the lin k s to be attacked and this re su ltin g in weak attacking e ffe c t, we presentan optim ised low -rate d e n ia l o f service attacks deploym ent strategy. Based on ro u tin g in fo rm a tio n , the strategy focuses on the o p tim isationdeploym ent o f attack tra ffic , so th a t the c ritic a l paths can be attacked more e ffe ctive ly. I t is dem onstrated by the sim ula tion experim ent basedon GTNetS that the op tim ised LD D oS attack deploym ent strategy proposed can e ffe ctive ly enhance the accuracy o f the low -rate d istrib u te dde n ia l o f service attack com pared w ith CXPST strategy, there is also a more obvious im provem ent in attacking effect. Based on the proposedstra tegy, we fu rth e r explore the LD D oS defense strategy fo r the In te rn e t backbone netw ork.
关 键 词:低速率分布式拒绝服务攻击 协调跨层面终止会话(CXPST)攻击 BGP路由协议
分 类 号:TP393.08[自动化与计算机技术—计算机应用技术]
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在链接到云南高校图书馆文献保障联盟下载...
云南高校图书馆联盟文献共享服务平台 版权所有©
您的IP:216.73.216.249