基于DHT的消息转发防御机制研究

Study of Defense Mechanism for Message Forwarding Based on DHT Model

DHT(Distributed Hash Tables)是结构化P2P(Peer to Peer)系统实现资源高效组织和定位的关键技术。对DTH系统中消息转发过程中的安全威胁及其解决方法进行了分析。以多路径算法为基础,对消息转发效率和安全性进行优化,提出了一种混合路由防御机制。首先结合迭代路由与递归路由的优点,设计了混合路由方式,保证了消息的转发效率并降低消息开销。然后改进了消息转发过程中的可靠性和消息源鉴别机制。最后,在四川大学校园网内进行了测试。仿真试验结果表明,采用混合路由下的防御机制在减少消息数量的同时提高了查询成功率,对于消息转发过程中的攻击有着较好的防御效果。

Distributed Hash Tables（DHT） is the key technology for structured P2P system to make resources organized and positioned efficiently.The security threats and the corresponding solving methods existing in the message forwarding process of DHT system were analyzed.Based on multi-path method,a defense mechanism with mixed routing was proposed to optimize the forwarding efficiency and safety.Firstly,a mixed routing combined the advantages of iterative and recursive routing was described in detail,which can efficiently forward the message with fewer messages overhead.Secondly,the message reliability and source authentication mechanism were improved to ensure message security in the forwarding process.In addition,the defense mechanism with mixed routing was tested in Sichuan University campus network.The simulation results showed that it has obvious effect on reducing the number of queries and increasing the success rate of forwarding message,which has a better defense effect against the attack in the forward phase.