| 一体化标识网络映射缓存DoS攻击防范方法研究 |
| |
| 引用本文： | 万明,张宏科,尚文利,沈烁,刘颖.一体化标识网络映射缓存DoS攻击防范方法研究[J].电子学报,2015,43(10):1941-1947. |
| |
| 作者姓名： | 万明 张宏科 尚文利 沈烁 刘颖 |
| |
| 作者单位： | 1. 中国科学院沈阳自动化研究所, 辽宁沈阳 110016;
2. 中国科学院网络化控制系统重点实验室, 辽宁沈阳 110016;
3. 北京交通大学下一代互联网互联设备国家工程实验室, 北京 100044;
4. 中国互联网络信息中心互联网基础技术开放实验室, 北京 100190 |
| |
| 摘 要： | 为了抵御一体化标识网络中接入路由器可能遭受的映射缓存DoS攻击,本文提出了一种基于双门限机制的映射缓存DoS攻击防范方法.该方法设计了一种基于迭代思想的谜题机制降低映射缓存中映射信息条目的增加速率,并采用了映射信息可信度算法识别和过滤映射缓存中恶意的映射信息条目.仿真实验与性能分析表明,该方法能够有效地抵御映射缓存DoS攻击,防止映射缓存溢出.
|
| 关 键 词： | 一体化标识网络 映射缓存DoS攻击 双门限机制 谜题机制 可信度 |
| 收稿时间： | 2012-11-14 |
An Efficient Approachto Defend DoS Attack Against Mapping Cache Under Identifier-Based Universal Network |
| |
| WAN Ming,ZHANG Hong-ke,SHANG Wen-li,SHEN Shuo,LIU Ying.An Efficient Approachto Defend DoS Attack Against Mapping Cache Under Identifier-Based Universal Network[J].Acta Electronica Sinica,2015,43(10):1941-1947. |
| |
| Authors: | WAN Ming ZHANG Hong-ke SHANG Wen-li SHEN Shuo LIU Ying |
| |
| Institution: | 1. Shenyang Institute of Automation Chinese Academy of Sciences, Shenyang, Liaoning 110016, China;
2. Key Laboratory of Networked Control System Chinese Academy of Science, Shenyang, Liaoning 110016, China;
3. National Engineering Laboratory for Next Generation Internet Interconnection Devices, Beijing Jaotong University, Beijing 100044, China;
4. DNSLAB, China Internet Network Information Center, Beijing 100190, China |
| |
| Abstract: | In order to prevent the potential DoS attack against mapping cache under identifier-based universal network, this paper proposes an efficient defense approach based on double-threshold scheme.This approach not only designs a novel puzzle challenge mechanism based on iterative idea to decrease the growth rate of mapping entries, but also presents the trust value algorithm of mapping information to identify and filter out the malicious mapping entries.In particular, our analytical results show that, this approach is efficient and feasible to prevent the DoS attack against mapping cache, and resists the mapping cache overflow. |
| |
| Keywords: | identifier-based universal network DoS attack against mapping cache double-threshold puzzle challenge trust value |
|
| 点击此处可从《电子学报》浏览原始摘要信息 |
| 点击此处可从《电子学报》下载免费的PDF全文 |
|
