低速率拒绝服务LDoS攻击性能的研究

Research on the performance of low-rate DoS attack

低速率拒绝服务(LDoS,low-rate denial of service)攻击是一种新型的周期性脉冲式DoS攻击。根据LDoS攻击的特点,通过估算正常TCP流的超时重传(RTO,retransmission time out),模拟产生LDoS攻击的周期流量,对网络目标在攻击下的性能进行了测试。重点研究了Web和FTP 2种服务器在LDoS攻击下吞吐量(thoughtout)性能的变化。实验表明,LDoS攻击具有隐蔽性强和破坏力大的特点,比洪(flood)攻击更具有危害性,此研究成果为LDoS攻击的检测和防御提供了依据。

Low-rate denial of service （LDoS） is a new breed of DoS attack with periodic pulse. LDoS attacks appear periodically in low volume, thereby damaging the victim servers for a long time without being detected. The LDoS attack traffic was simulated and generated by estimating the retransmission time out （RTO） of normal TCP flow based on the analysis of LDoS attack features, and the performance of targets under the attacking of LdoS was tested. Experiments focus on the thoughtout testing of Web and FTP server when LDoS attacks launched. Test results show that LDoS could be even more detrimental to network resources than the flooding type of DDoS attacks, because it is harder to be detected by available method. A lot of useful experimental data for future LDoS detection and defense research were presernted.