| 一种基于排队论的DoS攻防绩效评估方法 |
| |
| 引用本文： | 王必达,连一峰.一种基于排队论的DoS攻防绩效评估方法[J].中国科学院研究生院学报,2010,27(1):107-116. |
| |
| 作者姓名： | 王必达 连一峰 |
| |
| 作者单位： | 1. 中国科学院研究生院信息安全国家重点实验室,北京,100049
2. 中国科学院软件研究所,北京,100190;信息安全共性技术国家工程研究中心,北京,100080 |
| |
| 基金项目： | 国家自然科学基金项目，国家863基金项目 |
| |
| 摘 要： | 提出了一种新的基于排队论的DoS攻防绩效评估方法. 针对不同种类DoS攻防手段建立了统一的指标体系和绩效计算方法,基于排队论方法分别建立评估模型,对UDP Flood和SYN Flood攻击的绩效进行不包含主观因素的定量评估,分析不同攻击手段和强度的有效性. 针对典型DoS攻防场景,利用网络仿真工具进行模拟,通过实验与模型推导结果对比验证了排队论模型的合理性,并阐述了此方法在不同类型DoS攻防手段中的应用.
|
| 关 键 词： | 排队论 DoS攻防手段 指标体系 绩效评估 |
| 收稿时间： | 2009-05-15 |
| 修稿时间： | 2009-07-28 |
An efficiency evaluation methodology of DoS attack and defense mechanisms based on queueing theory |
| |
| WANG Bi-Da,LIAN Yi-Feng.An efficiency evaluation methodology of DoS attack and defense mechanisms based on queueing theory[J].Journal of the Graduate School of the Chinese Academy of Sciences,2010,27(1):107-116. |
| |
| Authors: | WANG Bi-Da LIAN Yi-Feng |
| |
| Institution: | 1. State Key Laboratory of Information Security, Graduate University of the Chinese Academy of Sciences,Beijing 100049,China;
2. Institute of Software, Chinese Academy of Sciences, Beijing 100190, China;
3. National Engineering Research Center of Information Security(NERCIS), Beijing 100080, China |
| |
| Abstract: | This paper presents a new efficiency evaluation methodology of DoS attack and defense mechanisms based on queueing theory. The unified index system and evaluation algorithm were proposed for various types of DoS attack and prevention. We also built queueing models to do the quantitative assessment and analyze objectively the efficiency of UDP Flood and SYN Flood. Network simulation tools were used in typical DoS attack scenarios. The rationality of the queueing models is verified through comparison of the e... |
| |
| Keywords: | queueing theory DoS attack and defense mechanisms index system efficiency evaluation |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《中国科学院研究生院学报》浏览原始摘要信息 |
| 点击此处可从《中国科学院研究生院学报》下载免费的PDF全文 |
|
