分布式拒绝服务攻击建模与形式化描述

Modeling and formally describing distributed denial of service attack

分布式拒绝服务(DDoS)攻击严重威胁网络的安全性。需要有合适的模型来刻画DDoS攻击的行为特征,指导DDoS攻击的分析、检测和防御。使用攻击树对分布式拒绝攻击进行建模,并引入Object_Z语言对具体攻击模式进行了面向对象的形式化描述。分布式拒绝服务攻击的攻击树模型可以刻画出分布式拒绝服务攻击的本质特征,对其具体子类的形式化描述又可以降低构造攻击模型的复杂度,从而易于使用,分析和维护。

Distributed denial of service attacks brings seriously threat to network security. Appropriate model is needed to depict the behavior of the DDoS attack and guide the analysis, detection and defense of the DDoS attack. Attack tree is adopted to model the distributed denial of service attack. Then, object-Z language, a formal depict attack language, is used to depict the sub-term of the attack tree model in detail. The attack tree model can characterize the DDoS essentially. The formal description of the sub-term reduce the complexity in constructing the attack model, so the model can be easily used, analyzed and maintained.