基于合约熵判决算法的区块链网络DDoS防御优化  

Optimization of blockchain network DDoS defense based on contract entropy judgment algorithm

作　　者：刘云[1] 陈路遥 宋凯 朱鹏俊 Liu Yun;Chen Luyao;Song Kai;Zhu Pengjun(Faculty of Information Engineering and Automation,Kunming University of Science and Technology,Kunming 650500,China)

机构地区：[1]昆明理工大学信息工程与自动化学院,云南昆明650500

出　　处：《南京理工大学学报》2024年第2期175-181,共7页Journal of Nanjing University of Science and Technology

基　　金：国家自然科学基金(61761025)。

摘　　要：为针对多域协同联合防御分布式拒绝服务(DDoS)更有效发挥区块链网络优势,该文提出智能合约熵检测(SCED)算法。基于Hyperledger Fabric区块链架构,首先,通过智能合约技术构建多域协作机制,建立智能合约协作子算法;然后,针对受害域内非法流量IP生成IP黑名单,并通知所有协作域,协同防御DDoS;其次,在各单域内部署由监测、比对、分类及防御模块组成的熵判决防御子算法,检测处理域内非法流量;最后,结合多域智能合约协作和单域熵判决防御,实现区块链网络中受害域、中间域及攻击域协同防御DDoS。仿真结果表明,对比ChainSecure等算法,SCED算法在精度和效率方面有较好的表现。To better leverage the advantages of blockchain networks in multi-domain collaborative defense against distributed denial of service(DDoS),a smart contract entropy detection(SCED)algorithm is proposed.based on the Hyperledger Fabric blockchain architecture,firstly,a multi-domain collaboration mechanism is built through blockchain smart contract technology,establishing smart contract collaboration sub-algorithms;then,IP blacklists are generated for illegal traffic IP in the victim domain,and all cooperative domains are notified to coordinate defense against DDoS;then,an entropy judgment defense sub-algorithm composed of monitoring,comparison,classification,and defense modules is deployed in each single-domain to detect and process illegal traffic in the domain;finally,coordinated defense against DDoS is achieved in the victim domain,intermediate domain,and attack domain in the blockchain network by combining multi-domain smart contract cooperation and single-domain entropy judgment defense.The simulation results show that,compared with the ChainSecure algorithm and so on,the SCED algorithm has a better performance in terms of accuracy and efficiency.

关 键 词：分布式拒绝服务 区块链 智能合约 信息熵 贝叶斯分类器 

分 类 号：TP312[自动化与计算机技术—计算机软件与理论]