BGP-SIS:一种域间路由系统BGP-LDoS攻击威胁传播模型
发布时间:2018-08-15 17:44
【摘要】:针对域间路由系统的低速率拒绝服务攻击(low-rate denial of service against BGP,BGP-LDo S)通过引起级联失效造成域间路由系统整体瘫痪,研究了BGP-LDo S攻击威胁下域间路由系统级联失效的传播机理、影响因素是应对和防范该攻击的基础。通过分析域间路由系统的结构特性以及BGP-LDo S攻击过程,提出一种基于传染病动力学的BGP-LDo S威胁传播模型BGP-SIS。将系统中每个节点的状态划分为易感态、感染态,利用传染病动力学模型SIS对攻击所造成的级联失效过程进行描述,推导攻击威胁下域间路由系统的最终状态。利用仿真实验对模型及推论的有效性进行验证,实验结果表明BGP-SIS能够有效描述和预测BGP-LDo S攻击下域间路由系统级联失效的传播规律,可为域间路由系统检测和防御BGP-LDo S攻击提供借鉴和参考。
[Abstract]:In view of the low rate denial of service attack (low-rate denial of service against BGPN BGP-LDO S) in inter-domain routing system, the mechanism of cascading failure of inter-domain routing system under the threat of BGP-LDo S attack is studied by causing the cascade failure of the inter-domain routing system to paralyze the whole inter-domain routing system. The influencing factors are the basis for coping with and preventing this attack. By analyzing the structural characteristics of inter-domain routing system and the process of BGP-LDo S attack, a BGP-LDo S threat propagation model based on infectious disease dynamics is proposed. The states of each node in the system are divided into susceptible states and infected states. The cascade failure process caused by the attack is described by the infectious disease dynamics model (SIS), and the final state of the inter-domain routing system under attack threat is derived. The validity of the model and corollary is verified by simulation experiments. The experimental results show that BGP-SIS can effectively describe and predict the propagation law of cascade failure of inter-domain routing system under BGP-LDo S attack. It can provide reference and reference for inter-domain routing system to detect and defend against BGP-LDo S attack.
【作者单位】: 信息工程大学;
【基金】:国家自然科学基金资助项目(61402525,61402526,61472215,61502528) 国家“863”计划资助项目(2012AA012902)
【分类号】:TP393.08
[Abstract]:In view of the low rate denial of service attack (low-rate denial of service against BGPN BGP-LDO S) in inter-domain routing system, the mechanism of cascading failure of inter-domain routing system under the threat of BGP-LDo S attack is studied by causing the cascade failure of the inter-domain routing system to paralyze the whole inter-domain routing system. The influencing factors are the basis for coping with and preventing this attack. By analyzing the structural characteristics of inter-domain routing system and the process of BGP-LDo S attack, a BGP-LDo S threat propagation model based on infectious disease dynamics is proposed. The states of each node in the system are divided into susceptible states and infected states. The cascade failure process caused by the attack is described by the infectious disease dynamics model (SIS), and the final state of the inter-domain routing system under attack threat is derived. The validity of the model and corollary is verified by simulation experiments. The experimental results show that BGP-SIS can effectively describe and predict the propagation law of cascade failure of inter-domain routing system under BGP-LDo S attack. It can provide reference and reference for inter-domain routing system to detect and defend against BGP-LDo S attack.
【作者单位】: 信息工程大学;
【基金】:国家自然科学基金资助项目(61402525,61402526,61472215,61502528) 国家“863”计划资助项目(2012AA012902)
【分类号】:TP393.08
【相似文献】
相关期刊论文 前10条
1 刘欣;朱培栋;;互联网域间路由安全研究[J];计算机工程;2005年24期
2 卢锡城;赵金晶;朱培栋;董攀;;域间路由系统自组织特性[J];软件学报;2006年09期
3 李自强,周明天;域间路由连通不完全性分析[J];计算机工程与应用;2005年27期
4 刘迎国,念其锋,朱培栋;域间路由系统的安全威胁及其对策[J];微机发展;2005年11期
5 王e鴈,
本文编号:2184944
本文链接:https://www.wllwen.com/guanlilunwen/ydhl/2184944.html