DDoS Attack Tracking Using Multi-Round Iterative Viterbi Algorithm in Satellite Internet  

作　　者：Guo Wei Xu Jin Pei Yukui Yin Liuguo Feng Wei 

机构地区：[1]Department of Electronic Engineering,Tsinghua University,Beijing 100084,China [2]China Telecom Cybersecurity Technology Co.,Ltd,Beijing,China [3]Operation Center of Network Security Products,China Telecom Co.,Ltd.,Beijing,China [4]Beijing National Research Center for Information Science and Technology,Beijing 100084,China [5]Research Institute of Tsinghua,Pearl River Delta,Guangzhou 510530,China

出　　处：《China Communications》2025年第3期148-163,共16页中国通信(英文版)

基　　金：supported by the National Key R&D Program of China(Grant No.2022YFA1005000);the National Natural Science Foundation of China(Grant No.62025110 and 62101308).

摘　　要：Satellite Internet(SI)provides broadband access as a critical information infrastructure in 6G.However,with the integration of the terrestrial Internet,the influx of massive terrestrial traffic will bring significant threats to SI,among which DDoS attack will intensify the erosion of limited bandwidth resources.Therefore,this paper proposes a DDoS attack tracking scheme using a multi-round iterative Viterbi algorithm to achieve high-accuracy attack path reconstruction and fast internal source locking,protecting SI from the source.Firstly,to reduce communication overhead,the logarithmic representation of the traffic volume is added to the digests after modeling SI,generating the lightweight deviation degree to construct the observation probability matrix for the Viterbi algorithm.Secondly,the path node matrix is expanded to multi-index matrices in the Viterbi algorithm to store index information for all probability values,deriving the path with non-repeatability and maximum probability.Finally,multiple rounds of iterative Viterbi tracking are performed locally to track DDoS attack based on trimming tracking results.Simulation and experimental results show that the scheme can achieve 96.8%tracking accuracy of external and internal DDoS attack at 2.5 seconds,with the communication overhead at 268KB/s,effectively protecting the limited bandwidth resources of SI.

关 键 词：DDoS tracking iterative Viterbi algorithm satellite Internet 6G 

分 类 号：TN927.2[电子电信—通信与信息系统] TN915.08[电子电信—信息与通信工程]