一体化标识网络映射缓存DoS攻击防范方法研究
An Efficient Approachto Defend DoS Attack Against Mapping Cache Under Identifier-Based Universal Network
查看参考文献20篇
|
文摘
|
为了抵御一体化标识网络中接入路由器可能遭受的映射缓存DoS攻击,本文提出了一种基于双门限机制的映射缓存DoS攻击防范方法.该方法设计了一种基于迭代思想的谜题机制降低映射缓存中映射信息条目的增加速率,并采用了映射信息可信度算法识别和过滤映射缓存中恶意的映射信息条目.仿真实验与性能分析表明,该方法能够有效地抵御映射缓存DoS攻击,防止映射缓存溢出. |
|
其他语种文摘
|
In order to prevent the potential DoS attack against mapping cache under identifier-based universal network,this paper proposes an efficient defense approach based on double-threshold scheme.This approach not only designs a novel puzzle challenge mechanism based on iterative idea to decrease the growth rate of mapping entries,but also presents the trust value algorithm of mapping information toidentify and filter out the malicious mapping entries.In particular,our analytical results show that,this approach is efficient and feasible to prevent the DoSattack against mapping cache,and resists the mapping cache overflow. |
|
来源
|
电子学报
,2015,43(10):1941-1947 【核心库】
|
|
DOI
|
10.3969/j.issn.0372-2112.2015.10.010
|
|
关键词
|
一体化标识网络
;
映射缓存DoS攻击
;
双门限机制
;
谜题机制
;
可信度
|
|
地址
|
1.
中国科学院沈阳自动化研究所, 中国科学院网络化控制系统重点实验室, 辽宁, 沈阳, 110016
2.
北京交通大学, 下一代互联网互联设备国家工程实验室, 北京, 100044
3.
中国科学院沈阳自动化研究所, 辽宁, 沈阳, 110016
4.
中国互联网络信息中心互联网基础技术开放实验室, 北京, 100190
|
|
语种
|
中文 |
|
文献类型
|
研究性论文 |
|
ISSN
|
0372-2112 |
|
学科
|
电子技术、通信技术 |
|
基金
|
国家自然科学基金
;
国家863计划
;
中央高校基本科研业务费专项资金
;
中国互联网信息中心DNSLAB开放基金资助项目
|
|
文献收藏号
|
CSCD:5575144
|
参考文献 共
20
共1页
|
|
1.
Farinacci D.
The locator/ID separation protocol (LISP).IETF Internet Standard,RFC 6830,2013
|
被引
1
次
|
|
|
|
|
2.
Whittle R.
Ivip (Internet vastly improved plumbing) architecture.Internet Draft,draft-whittle-ivip-arch-04,2010
|
被引
1
次
|
|
|
|
|
3.
张宏科. 新网络体系基础研究——一体化网络与普适服务.
电子学报,2007,35(4):593-598
|
被引
50
次
|
|
|
|
|
4.
李世勇. 基于网络效用最大化的一体化网络服务层映射模型.
电子学报,2010,38(2):282-289
|
被引
6
次
|
|
|
|
|
5.
董平. 新一代互联网移动管理机制研究.
电子学报,2008,36(10):1916-1922
|
被引
3
次
|
|
|
|
|
6.
Saucez D.
LISP threats analysis.IETF Internet Draft,draft-ietf-lisp-threats-04.txt,2013
|
被引
1
次
|
|
|
|
|
7.
Fallah M. A puzzle-based defense strategy against flooding attacks using game theory.
IEEE Transactions on Dependable and Secure Computing,2008,7(1):5-19
|
被引
10
次
|
|
|
|
|
8.
Gao Y. Efficient trapdoor based client puzzle against DoS attacks.
Network Security,2010:229-249
|
被引
1
次
|
|
|
|
|
9.
Tegeler F. SybilConf:computational puzzles for confining sybil attacks.
Proceedings of INFOCOM 2010 on Computer Communications Workshops,2010:1-2
|
被引
1
次
|
|
|
|
|
10.
Jφsang A. A survey of trust and reputation systems for online services provision.
Decision Support Systems,2007,43(2):618-644
|
被引
139
次
|
|
|
|
|
11.
Tritilanunt S. Toward non-parallelizable client puzzles.
Proceedings of 6th International Conference on Cryptology and NetworkSecurity,2007:247-264
|
被引
1
次
|
|
|
|
|
12.
Molsa J V E. Effectiveness of rate-limiting in mitigating flooding DoS attacks.
Proceedings of the Third IASTED International Conference on Communications,Internet,and Information Technology,2004:155-160
|
被引
1
次
|
|
|
|
|
13.
Khanna S. Adaptive selective verification:an efficient adaptive countermeasure to thwart DoS attacks.
IEEE Transactions on Networking,2012,20(3):715-728
|
被引
1
次
|
|
|
|
|
14.
Barna C. Model-based adaptive DoS attack mitigation.
Proceedings of 2012 ICSE Workshop on Software Engineering for Adaptive and Self-Managing Systems,2012:119-128
|
被引
1
次
|
|
|
|
|
15.
Yang X W. TVA:A DoS-limiting network architecture.
IEEE/ACM Transactions on Networking,2008,16(6):1267-1280
|
被引
5
次
|
|
|
|
|
16.
Parno B. Portcullis:protecting connection setup from dnial-of-capability attacks.
Proceedings of ACM SIGCOMM 2007,2007:289-300
|
被引
1
次
|
|
|
|
|
17.
Liu X. NetFence:preventing Internet denial of service from inside out.
Proceedings of ACM SIGCOMM 2010,2010:255-266
|
被引
1
次
|
|
|
|
|
18.
Liu X. To filter or to authorize:network-layerDoS defense against multimillion-node botnets.
Proceedings of ACM SIGCOMM 2008,2008:195-206
|
被引
1
次
|
|
|
|
|
19.
孙长华. 分布式拒绝服务攻击研究新进展综述.
电子学报,2009,37(7):1562-1569
|
被引
13
次
|
|
|
|
|
20.
Kim J. A deep dive into the LISP cache and what ISPs should know about it.
Proceedinds of the 10th International IPIF TC 6 Networking Conference (NETWORKING 2011),2011:267-278
|
被引
1
次
|
|
|
|
|
了解气象卫星更多信息，请访问