基于节点路径重构和ELM的无线通信网络DDoS攻击源追踪  

Tracking of DDoS attack source in wireless communication network based on node path reconstruction and ELM

作　　者：方欲晓 何可人[1] FANG Yuxiao;HE Keren(Changzhou University,Changzhou 213000,China)

机构地区：[1]常州大学,江苏常州213000

出　　处：《现代电子技术》2024年第13期93-96,共4页Modern Electronics Technique

基　　金：江苏省现代教育技术研究2023年度智慧校园专项重点课题(2023-R-107305)。

摘　　要：在无线通信网络中,DDoS攻击通常涉及大量的攻击者和恶意节点,并以多种形式发起攻击。攻击流量经过中间节点和反射/放大攻击等技术手段后变得更加复杂,追踪其溯源路径和确定唯一的攻击源变得复杂。为此,文中研究基于节点路径重构和ELM的无线通信网络DDoS攻击源追踪方法。通过正则化方式优化ELM的参数,检测获取DDoS攻击数据包;采用路由器标记算法标记DDoS攻击数据包,在无线通信网络域间重构攻击节点路径,获取DDoS攻击源位置,完成无线通信网络DDoS攻击源追踪。实验结果证明:文中方法可精准检测获取DDoS攻击数据包,并完成攻击数据包的标记,且可有效重构攻击节点路径,追踪到DDoS攻击源。In wireless communication networks,DDoS(distributed denial of service)attacks usually involve a large number of attackers and malicious nodes,and the attacks are launched in multiple forms.Attack traffic becomes more complex after passing through intermediate nodes and techniques such as reflection/amplification attacks,and tracing its trace path and determining the unique attack source become complicated.Therefore,a tracking method of DDoS attack source in wireless communication network based on node path reconstruction and ELM(extreme learning machine)is studied.By regularization,the ELM parameters are optimized to detect and obtain DDoS attack packets.The router marking algorithm is used to mark DDoS attack packets,reconstruct the attack node path in the wireless communication network domain,obtain the location of DDoS attack source,and complete the tracking of DDoS attack source in the wireless communication network.Experimental results show that the proposed method can accurately detect and obtain DDoS attack packets,and complete the marking of attack packets.In addition,this method can effectively reconstruct the path of attack nodes and trace the DDoS attack source.

关 键 词：节点路径重构 ELM 无线通信网络 DDoS攻击源 正则化 攻击数据包 路由器标记 自治系统 

分 类 号：TN92-34[电子电信—通信与信息系统] TP393.08[电子电信—信息与通信工程]