命名数据网络中基于信息熵的Interest洪泛攻击检测与防御  

Information entropy-based Interest Flooding Attack detection and defense in Named Data Networking

作　　者：侯睿[1] 韩敏 陈璟 何柳婷 毛腾跃[1] HOU Rui;HAN Min;CHEN Jing;HE Liuting;MAO Tengyue(College of Computer Science,South-Central University for Nationalities,Wuhan 430074,China)

机构地区：[1]中南民族大学计算机科学学院

出　　处：《中南民族大学学报（自然科学版）》2019年第2期273-277,共5页Journal of South-Central University for Nationalities：Natural Science Edition

基　　金：国家自然科学基金资助项目(60841001);中央高校基本科研业务费专项资金资助项目(CZT19011);中南民族大学2019年硕士研究生学术创新基金项目(2019sycxjj119)

摘　　要：在命名数据网络中,兴趣包洪泛攻击通过向网络发送大量恶意interest包来消耗网络资源,从而对NDN造成较大危害.针对目前所提出的IFA攻击检测与防御方法存在攻击模式单一、在应对复杂攻击模式时效果不明显等局限,提出一种基于信息熵的改进方法(EIM),该方法通过与NDN路由器相连的用户的信誉值和信息熵相结合来限制攻击者发送的恶意interest包,很好地解决了现有方法在应对复杂的攻击模式时的局限性.仿真结果表明EIM较信息熵方法能够更有效地缓解IFA.In Named Data Networking(NDN),Interest Flooding Attack(IFA)sends plenty of malicious interest packets into the network to exhaust its resource,thus cause enormous damage.For the current proposed IFA attack detection and defense method,only a single attack mode is involved,so that the effect is not obvious when dealing with complex attack modes.An information Entropy-based Improved Method(EIM)is proposed for IFA in this paper.EIM combines a user′s reputation value and information entropy of the NDN router,which is directly connected to the user,to restrict the malicious interest packet sent by attackers,and solves the limitation of the existing method in dealing with the complex attack mode.Simulation results show that EIM can alleviate IFA more effectively than information entropy method.

关 键 词：命名数据网络 兴趣包洪泛攻击 信誉值 信息熵 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]