期刊文献+

基于RF位的多阶段动态路径标识模型

RF-bit Based Multi-stage Dynamic Path Identification Model
下载PDF
导出
摘要 为防御因特网的分布式拒绝服务攻击,提出了一种新颖的基于RF位的动态路径标识方案(RFPi),并采用多阶段的学习过滤模型.理论分析和仿真实验均表明:所采用的新方案最大程度地实现对标记域的有效利用,提高了攻击包和合法包的区分效果,且具有良好的可扩展性,防御效果较为理想. To defend against Distributed Denial of Service (DDoS) attacks, a novel dynamic path identification scheme based on RF-bit is presented, featuring in a multi-stage learning and filter model adopted. Theoretical analysis and simulation show that, the presented scheme achieves the most efficient utilization of the identification field, improves the competence for discerning malicious and legitimate packets, and has superior defensibility to the previous schemes.
出处 《宁波大学学报(理工版)》 CAS 2009年第1期27-32,共6页 Journal of Ningbo University:Natural Science and Engineering Edition
关键词 网络安全 拒绝服务攻击和防御 数据包标记 路径标识 因特网 network security DDoS attacks and defense packet marking path identification
  • 相关文献

参考文献4

  • 1Yaar A, Perrig A, Song D. Pi: A path identification mechanism to defend against DDoS attacks[C]//In IEEE Symposium on Security and Privacy, CA: Oakland, 2003.
  • 2Yaar A, Perrig A, Song D. StackPi: new packet marking and filtering mechanisms for DDoS and IP spoofing defense[J]. IEEE Journal on Selected Areas in Communications, 2006, 24(10): 1 853-1 863.
  • 3Jin C, Wang H, Shin K G. Hop-count filtering: an effective defense against spoofed DDoS traffic[J]. IEEE ACM transactions on Networking, 2007, 15(1):40-53.
  • 4Lee F, Shieh S..Defending against spoofed DDoS attacks with path fingerprint[J]. Computers & Security, 2005, 24 (7):571-586.

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部