信息中心网络中dos攻击的检测与防御机制

Dos Attack Detection and Defense Mechanism in Information Center Network

信息中心网络(Information Centric Networks,ICN)是一种新兴的网络架构,是极具前景的未来网络架构之一。ICN关注的是数据的本身,而不是数据的位置。为了成为一个可行的互联网架构,ICN必须能够应对当前现有的互联网安全威胁。故此,重点研究ICN中的拒绝服务攻击(Denial of Service,DoS),设计了一个用来检测DoS攻击的框架。然后,提出一种基于请求包回溯的防御机制。仿真实验结果表明,检测算法能够准确检测出DoS的发生,而防御机制能有效地缓解DoS攻击。

Information Centric Networks(ICN)is a novel network architecture and one of the most promising fu原ture network architectures.ICN focuses on the data itself,rather than the location of data.To become an available In原ternet architecture,ICN must be able to deal with current Internet security threats.Therefore,this paper focuses on the Denial of Service(Dos)in ICN.First,a framework for detecting Dos attacks is proposed.And then,a defense mechanism against Dos is present,which is based on the trackback of requests.Simulation results show that the detection algorithm can accurately detect the occurrence of Dos,and the defense mechanism can effectively mitigate Dos attacks.