针对云计算路由平台的虚拟哈希安全路径的研究

发布时间：2018-03-14 02:12

本文选题：云计算路由平台　切入点：DDoS　出处：《中国民航大学》2014年硕士论文　论文类型：学位论文

【摘要】：分布式拒绝服务攻击DDoS(Distributed Denial of Service)是大规模网络的主要安全威胁之一,是云计算(Cloud Computing)平台安全保护中的一个关键问题。本文针对云计算面临的DDoS攻击的防护进行了研究,重点研究了云计算路由平台的DDoS攻击防御问题。本文研究了在云计算数据中心内部的DDoS攻击与LDoS攻击的影响。云计算平台具有的心跳机制使得DDoS攻击并不十分有效。而LDoS攻击并不彻底拥塞链路,因此不会阻断心跳信息。为了证实心跳机制对DDoS攻击的效果影响,本文在Hadoop云计算平台之上进行攻击仿真,重点研究了两种攻击方式对云计算平台提供文件传输服务的影响,并进行了比较分析。通过性能仿真结果可以发现,在云计算平台内部,由于心跳机制的影响使得传统DDoS攻击方式对云计算平台的影响并不大。因此云计算平台对于DDoS攻击的防御工作主要在于外部方面。本文在研究大规模网络防御DDoS攻击的安全覆盖服务SOS(Security Overlay Service)方法的基础上,揭示了SOS在节点被攻击时的退出机制存在的安全漏洞;根据云计算路由策略改进了一致性哈希算法Chord,提出了适用于云计算路由平台三层架构的虚拟哈希安全访问路径VHSAP(Virtualization Hash Security Access Path);在安全访问路径中引入了心跳机制,利用虚拟机技术实现弹性的虚拟节点,完成在云平台中被攻击节点之间的无缝切换,保证用户对云计算平台的安全访问。本文针对VHSAP防御DDoS的性能进行了仿真实验,重点研究了在哈希安全访问路径HSAP中被攻击节点数和切换时延等参数,并与SOS方法进行了比较。实验结果表明:在DDoS攻击下,VHSAP具有较高的数据通过率,可以提高云计算平台的安全性。
[Abstract]:Distributed denial of service attack (DDoS(Distributed Denial of Service) is one of the major security threats to large-scale networks and a key issue in the security protection of cloud computing platforms. This paper studies the influence of DDoS attack and LDoS attack in cloud computing data center. The heartbeat mechanism of cloud computing platform makes DDoS attack not very good. And LDoS attacks are not completely congested links, Therefore, the heartbeat information will not be blocked. In order to verify the effect of heartbeat mechanism on DDoS attack, this paper simulates the attack on the Hadoop cloud computing platform, and focuses on the impact of two attack modes on the file transfer service provided by the cloud computing platform. Through the performance simulation results, we can find that in the cloud computing platform, Because of the influence of heartbeat mechanism, the traditional DDoS attack mode has little influence on the cloud computing platform. Therefore, the defense of cloud computing platform to DDoS attack mainly lies in the external aspect. This paper is studying the large-scale network defense against DDoS. Attack based on the security overlay service SOS(Security Overlay Service method, The security vulnerabilities in the exit mechanism of SOS when the nodes are attacked are revealed. According to the cloud computing routing strategy, this paper improves the consistent hash algorithm Chord. proposes a virtual hash secure access path, VHSAP(Virtualization Hash Security Access path, which is suitable for the three-layer architecture of cloud computing routing platform, and introduces a heartbeat mechanism into the secure access path. Virtual machine technology is used to realize flexible virtual nodes, and seamless switching between the attacked nodes in cloud platform is completed, which ensures the users' secure access to cloud computing platform. This paper makes a simulation experiment on the performance of VHSAP defense against DDoS. The parameters such as the number of attacked nodes and handoff delay in the hash secure access path (HSAP) are studied and compared with the SOS method. The experimental results show that the DDoS attack has a high data passing rate. It can improve the security of cloud computing platform.
【学位授予单位】：中国民航大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】