计算机应用与软件2016,Vol.33Issue(8):289-293,5.DOI:10.3969/j.issn.1000-386x.2016.08.064
面向 Internet 骨干网的优化 LDDoS 策略
AN OPTIMISED LOW-RATE DISTRIBUTED DENIAL OF SERVICE ATTACK STRATEGY FOR INTERNET BACKBONE NETWORK
摘要
Abstract
The low-rate distributed denial of service (LDDoS)attack is becoming one of the major threats to the Internet.In order to better explore the pitfalls of LDDoS existed in current Internet and to effectively enhance the corresponding defense strategy,it is necessary to study the Internet-oriented attack and defensive strategies of LDDoS.Aiming at the defect of CXPST,an attack strategy of LDDoS for Internet backbone network,that its attack traffic is hard to converge on the links to be attacked and this resulting in weak attacking effect,we present an optimised low-rate denial of service attacks deployment strategy.Based on routing information,the strategy focuses on the optimisation deployment of attack traffic,so that the critical paths can be attacked more effectively.It is demonstrated by the simulation experiment based on GTNetS that the optimised LDDoS attack deployment strategy proposed can effectively enhance the accuracy of the low-rate distributed denial of service attack compared with CXPST strategy,there is also a more obvious improvement in attacking effect.Based on the proposed strategy,we further explore the LDDoS defense strategy for the Internet backbone network.关键词
低速率分布式拒绝服务攻击/协调跨层面终止会话(CXPST)攻击/BGP 路由协议Key words
LDDoS/Coordinated cross plane session termination (CXPST)/BGP routing protocol分类
信息技术与安全科学引用本文复制引用
陈世云,刘渊,王晓锋..面向 Internet 骨干网的优化 LDDoS 策略[J].计算机应用与软件,2016,33(8):289-293,5.基金项目
国家自然科学基金项目(61103223);江苏省自然科学基金重点研究专项项目(BK2011003);江苏省2014年度普通高校研究生实践创新计划项目(SJLX_0524)。 ()