摘要
对基于Gnutella协议的P2P计算网络实施DoS攻击的特征进行了详细分析,通过设置攻击容忍度和防御起点,提出了一种简单的基于特征的DoS攻击防御策略,运用基于贝叶斯推理的异常检测方法发现攻击,使系统能根据DoS攻击的强弱,自适应调整防御机制,维持网络的服务性能。仿真结果表明,本文提出的防御策略能有效防御恶意节点对网络发动的DoS攻击,使网络服务的有效性达到98%,正常请求包被丢弃的平均概率为1.83%,预防机制平均时间开销仅占网络总开销的6.5%。
This paper calculate to based on Gnutella agreement P2P network implement characteristic that DoS attack go on in detail analyzing. By setting up tbe attack tolerating degree and starting point with defending, a new kind of simple DoS attacks the tactics of defending based on characteristic is proposed. Use the abnormality detection method to find attack based on Bayes reasoning, he power enabled system to attack according to DoS, adjust the mechanism of defending in self-adaptation and maintain the service performance of the network. The simulation result shows, this paper put forward defend tactics can effective defend hostile node attack to DoS that network mobilize, and making the service efficiency of the network more than 98%, it is 1.83% that normal request packets the average probability abandoned, prevent mechanism average time expenses account for network of overhead only 6.5%.
出处
《微电子学与计算机》
CSCD
北大核心
2005年第7期92-98,共7页
Microelectronics & Computer
基金
国家自然科学基金项目(60273075)
资助湖南省教育厅重点基金(03A036)资助
关键词
对等网
DOS攻击
自适应攻击防御
贝叶斯推理
防御起点
攻击容忍度
Peer to peer network, Denial of service attacker, Self-adaptation attacks the defend, Starting point with defend, Attack and tolerate degree
