面向Internet骨干网的优化LDDoS策略  被引量:1

AN OPTIMISED LOW-RATE DISTRIBUTED DENIAL OF SERVICE ATTACK STRATEGY FOR INTERNET BACKBONE NETWORK

在线阅读下载全文

作  者:陈世云[1] 刘渊[1] 王晓锋[2] Chen Shiyun;Liu Yuan;Wang Xiaofeng(School of Digital Media, Jiangnan University, Wuxi 214122 , Jiangsu, China;School of Internet of Things Engineering, Jiangnan University, Wuxi 214122 , Jiangsu, China)

机构地区:[1]江南大学数字媒体学院,江苏无锡214122 [2]江南大学物联网工程学院,江苏无锡214122

出  处:《计算机应用与软件》2016年第8期289-293,共5页Computer Applications and Software

基  金:国家自然科学基金项目(61103223);江苏省自然科学基金重点研究专项项目(BK2011003);江苏省2014年度普通高校研究生实践创新计划项目(SJLX_0524)

摘  要:低速率分布式拒绝服务攻击(LDDoS)正成为互联网的重要安全威胁之一。为更好地探索当前Internet存在的LDDoS隐患,以有效提升相应的防御策略,有必要研究面向Internet的LDDoS攻防策略。针对面向Internet骨干网的LDDoS攻击策略(CXPST)存在的攻击流量难以汇集于被攻击路径,从而导致攻击效果不明显的问题,提出一种优化的低速率分布式拒绝服务攻击部署策略。该策略基于路由信息,重点优化攻击流部署,从而能更有效地攻击关键路径。基于GTNet S进行仿真实验表明,与CXPST策略相比,所提出的优化LDDoS策略能有效提升低速率拒绝服务攻击的精确性,实际的攻击效果更为明显。基于所提出的策略,进一步探讨面向Internet骨干网LDDoS的防御策略。The low -rate d istrib u te d de n ia l o f service (L D D o S ) attack is becom ing one o f the m a jo r threats to the In te rn e t. In order to be tterexplore the p itfa lls o f LDDoS existed in cu rre n t In te rn e t and to e ffe ctive ly enhance the corresponding defense strategy, it is necessary to studythe In te rn e t-o rie n te d attack and defensive strategies o f LD D oS . A im in g at the defect o f C X P S T, an attack strategy o f LD D oS fo r In te rn e tbackbone n e tw o rk, th a t its attack tra ffic is hard to converge on the lin k s to be attacked and this re su ltin g in weak attacking e ffe c t, we presentan optim ised low -rate d e n ia l o f service attacks deploym ent strategy. Based on ro u tin g in fo rm a tio n , the strategy focuses on the o p tim isationdeploym ent o f attack tra ffic , so th a t the c ritic a l paths can be attacked more e ffe ctive ly. I t is dem onstrated by the sim ula tion experim ent basedon GTNetS that the op tim ised LD D oS attack deploym ent strategy proposed can e ffe ctive ly enhance the accuracy o f the low -rate d istrib u te dde n ia l o f service attack com pared w ith CXPST strategy, there is also a more obvious im provem ent in attacking effect. Based on the proposedstra tegy, we fu rth e r explore the LD D oS defense strategy fo r the In te rn e t backbone netw ork.

关 键 词:低速率分布式拒绝服务攻击 协调跨层面终止会话(CXPST)攻击 BGP路由协议 

分 类 号:TP393.08[自动化与计算机技术—计算机应用技术]

 

参考文献:

正在载入数据...

 

二级参考文献:

正在载入数据...

 

耦合文献:

正在载入数据...

 

引证文献:

正在载入数据...

 

二级引证文献:

正在载入数据...

 

同被引文献:

正在载入数据...

 

相关期刊文献:

正在载入数据...

相关的主题
相关的作者对象
相关的机构对象