Overall-Transparent Dynamic Identifier-Mapping Mechanism Against Scanning and Worm Propagation in the SINET  

作　　者：Linyuan Yao Ping Dong Hongke Zhang Xiaojun Wang 

机构地区：[1]China Academy of Electronics and Information Technology,Beijing 100041,China [2]School of Electronic and Information Engineering,Beijing Jiaotong University,Beijing 100044,China [3]School of Electronic Engineering,Dublin City University,Dublin 43016,Ireland

出　　处：《China Communications》2020年第5期137-150,共14页中国通信（英文版）

摘　　要：Static assignment of IP addresses or identifiers can be exploited by an adversary to attack a network. However, existing dynamic IP address assignment approaches suffer from two limitations, namely: participation of terminals in the assignment and inadequate network server management. Thus, in this paper, we propose an Overall-transparent Dynamic Identifier-mapping Mechanism(ODIM) to manage the identifier of network nodes to defend against scanning and worm propagation in the Smart Identifier NETwork(SINET). We establish the selection and allocation constraints, and present selection and allocation algorithms to determine the constraints. The non-repetition probability and cover cycle allow us to evaluate the defense efficiency against scanning. We propose the probability for routing identifiers and derive the defense efficiency of ODIM against worm propagation. Simulation results and theoretical analysis show that the proposed method effectively reduces the detection probability of Routing IDentifiers(RIDs) and thus improves defense capabilities against worm propagation.

关 键 词：dynamic identifier-mapping network scanning worm propagation smart identifier network 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]