基于相遇记录的域间路由协议攻击检测模型  

Inter-Domain Routing Protocol Attack Detection Model Based on Encounter Records

作　　者：梁卫芳 张爽 LIANG Wei-fang;ZHANG Shuang(College of Computer Science and Engineering,Hunan Information University,Changsha Hunan 410151,China;School of Automation and Electrical Engineering,Shenyang Ligong University,Shenyang Liaoning 110180,China)

机构地区：[1]湖南信息学院计算机科学与工程学院,湖南长沙410151 [2]沈阳理工大学自动化与电气工程学院,辽宁沈阳110180

出　　处：《计算机仿真》2023年第10期468-472,共5页Computer Simulation

基　　金：基于相遇记录的域间路由协议攻击检测模型(7131003)。

摘　　要：由于当前已有方法获取的节点信任值评价结果准确性偏低,导致检测率和分组传输率下降,误检率和检测平均延时增加。提出一种基于相遇记录的域间路由协议攻击检测模型,计算不同节点之间的信任值,通过节点相遇记录对信任值进行量化处理。同时将直接观察信息和间接观察信息进行融合,对节点的信任度进行评价,同时对黑名单进行维护操作。根据节点转发能力以及黑名单进行路由决策,构建域间路由协议攻击检测模型,通过模型实现检测。仿真结果表明,所提模型可以有效提升检测率和分组传输率,同时有效降低误检率以及检测平均延时。Due to the low accuracy of node trust value evaluation,the detection rate and packet transport rate decrease,and the false detection rate and average detection delay increase.In this article,a model for detecting interdomain routing protocol attacks based on encounter records was designed.Firstly,the trust values between different nodes were calculated and then quantified through node encounter records.In the meanwhile,direct observation information was integrated with indirect observation information to evaluate the trust degree of node and maintain the blacklist.Moreover,a routing decision was made by node forwarding capability and blacklist,and then an inter-domain routing protocol attack detection model was built.Finally,the detection was completed through the model.Simulation results show that the proposed model can effectively improve the detection rate and packet transport rate,while effectively reducing the false detection rate and average detection delay.

关 键 词：相遇记录 域间路由协议 攻击检测模型 信任值 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]