面向分布式拒绝服务攻击的通用形式化模型

A General Formal Model for Distributed Denial of Service Attacks

分布式拒绝服务攻击(DDoS)具有攻击种类繁多、涉及参数复杂,因而存在缺乏一种准确、直观、通用的分析模型的问题,故提出了一种通用的DDoS形式化模型框架。首先在分析DDoS理论的基础上给出了通用形式化模型的详细定义;其次对系统实体功能、通信信道及实体间的交互行为进行了深入分析和详细的抽象建模;最后,对模型进行了实例化分析,在给出明确的问题描述后通过通用的形式化模型完成了对UDP洪水攻击的分析。实例分析表明了模型框架具有直观、易用及通用性特征。对于DDoS攻击的具体分析提供了一定的理论基础和实用价值。

Distributed denial of service attack(DDoS)lacks an accurate,intuitive and general analysis model due to the variety of attacks and the complexity of parameters involved.Therefore,a general DDoS formal model framework is proposed in this paper.First,the definition of the general formal model is given based on the analysis of DDoS theory.Second,the system entity function,communication channel and the interaction between entities are analyzed and modeled in detail.Finally,the model is instantiated and the UDP flood attack is analyzed by a general formalized model after a clear description of the problem is given.The case study shows that the model framework is intuitive,easy to use and general.Our work will provide a certain theoretical basis and practical value for the specific analysis of DDoS attacks.