發(fā)布時(shí)間：2018-01-24 18:16

  本文關(guān)鍵詞： 多維偽隨機(jī)序列 邊采樣矩陣 高級(jí)包標(biāo)記策略 壓縮編碼 攻擊路徑圖　出處：《計(jì)算機(jī)應(yīng)用》2016年11期 　論文類型：期刊論文

【摘要】：高級(jí)包標(biāo)記策略(AMS)是對(duì)分布式拒絕服務(wù)(DDo S)攻擊進(jìn)行IP追蹤的有效算法,但是,由于使用哈希函數(shù)實(shí)現(xiàn)邊地址的壓縮,AMS算法存在復(fù)雜度高、保密性差、誤報(bào)率高等缺陷。為了提高追蹤效率,設(shè)計(jì)了一種基于多維偽隨機(jī)序列的AMS算法:一方面,在路由器上,以全硬件實(shí)現(xiàn)的邊采樣矩陣代替原有的哈希函數(shù),完成IP地址的壓縮編碼;另一方面,在受害者端,結(jié)合邊地址壓縮碼和邊的權(quán)重計(jì)算過程,實(shí)現(xiàn)攻擊路徑圖的輸出。仿真實(shí)驗(yàn)中,基于多維偽隨機(jī)序列的AMS算法與原始算法性能基本一致,但能有效減少誤判的發(fā)生和快速判斷偽造路徑。實(shí)驗(yàn)結(jié)果表明,所提算法保密性能高,計(jì)算速度快,抗攻擊能力強(qiáng)。
[Abstract]:Advanced packet tagging policy (AMS) is an effective algorithm for IP tracking of distributed denial-of-service (DDoS) attacks, however, edge addresses are compressed by using hash functions. In order to improve the tracking efficiency, a AMS algorithm based on multidimensional pseudo-random sequences is designed: on the one hand, on the router. The edge sampling matrix realized by the whole hardware replaces the original hash function to complete the compression coding of IP address. On the other hand, in the victim side, combined with the edge address compression code and the edge weight calculation process, the attack path graph output is realized. The AMS algorithm based on multi-dimensional pseudorandom sequence is basically consistent with the original algorithm, but it can effectively reduce the occurrence of false judgment and quickly determine the false path. The experimental results show that the proposed algorithm has high security performance. Fast calculation and strong ability to resist attack.
【作者單位】： 南京師范大學(xué)泰州學(xué)院信息工程學(xué)院;南京師范大學(xué)地理科學(xué)學(xué)院;
【基金】：“十二五”國家支撐計(jì)劃項(xiàng)目(2012BAH35B02) 泰州市科技支撐計(jì)劃項(xiàng)目(TS201517)~~
【分類號(hào)】：TP393.08
【正文快照】： 0引言分布式拒絕服務(wù)(Distributed Denial of Service,DDo S)攻擊[1]是一種分布的、協(xié)作的大規(guī)模拒絕服務(wù)(Denial ofService,Do S)攻擊,它主要的攻擊目標(biāo)是大型的站點(diǎn),比如商業(yè)公司、搜索引擎和政府部門的網(wǎng)站等。由于DDo S攻擊較容易實(shí)施,且難于防范和追蹤,已經(jīng)成為了互聯(lián)網(wǎng)，

本文編號(hào)：1460685