摘要
低速率分布式拒绝服务攻击(LDDoS)正成为互联网的重要安全威胁之一。为更好地探索当前Internet存在的LDDoS隐患,以有效提升相应的防御策略,有必要研究面向Internet的LDDoS攻防策略。针对面向Internet骨干网的LDDoS攻击策略(CXPST)存在的攻击流量难以汇集于被攻击路径,从而导致攻击效果不明显的问题,提出一种优化的低速率分布式拒绝服务攻击部署策略。该策略基于路由信息,重点优化攻击流部署,从而能更有效地攻击关键路径。基于GTNet S进行仿真实验表明,与CXPST策略相比,所提出的优化LDDoS策略能有效提升低速率拒绝服务攻击的精确性,实际的攻击效果更为明显。基于所提出的策略,进一步探讨面向Internet骨干网LDDoS的防御策略。
The low -rate d istrib u te d de n ia l o f service (L D D o S ) attack is becom ing one o f the m a jo r threats to the In te rn e t. In order to be tterexplore the p itfa lls o f LDDoS existed in cu rre n t In te rn e t and to e ffe ctive ly enhance the corresponding defense strategy, it is necessary to studythe In te rn e t-o rie n te d attack and defensive strategies o f LD D oS . A im in g at the defect o f C X P S T, an attack strategy o f LD D oS fo r In te rn e tbackbone n e tw o rk, th a t its attack tra ffic is hard to converge on the lin k s to be attacked and this re su ltin g in weak attacking e ffe c t, we presentan optim ised low -rate d e n ia l o f service attacks deploym ent strategy. Based on ro u tin g in fo rm a tio n , the strategy focuses on the o p tim isationdeploym ent o f attack tra ffic , so th a t the c ritic a l paths can be attacked more e ffe ctive ly. I t is dem onstrated by the sim ula tion experim ent basedon GTNetS that the op tim ised LD D oS attack deploym ent strategy proposed can e ffe ctive ly enhance the accuracy o f the low -rate d istrib u te dde n ia l o f service attack com pared w ith CXPST strategy, there is also a more obvious im provem ent in attacking effect. Based on the proposedstra tegy, we fu rth e r explore the LD D oS defense strategy fo r the In te rn e t backbone netw ork.
作者
陈世云
刘渊
王晓锋
Chen Shiyun;Liu Yuan;Wang Xiaofeng(School of Digital Media, Jiangnan University, Wuxi 214122 , Jiangsu, China;School of Internet of Things Engineering, Jiangnan University, Wuxi 214122 , Jiangsu, China)
出处
《计算机应用与软件》
CSCD
2016年第8期289-293,共5页
Computer Applications and Software
基金
国家自然科学基金项目(61103223)
江苏省自然科学基金重点研究专项项目(BK2011003)
江苏省2014年度普通高校研究生实践创新计划项目(SJLX_0524)
