【24h】

RCS: A Distributed Mechanism Against Link Flooding DDoS Attacks

机译:RCS:一种针对链路泛洪DDoS攻击的分布式机制

获取原文
获取原文并翻译 | 示例

摘要

DoS/DDoS attacks especially the Link Flooding have exerted severe threat on Internet. In this paper we propose a novel mechanism called Rate Control System (RCS) against Link Flooding based on the correlation analysis of upper link flows. According to the feature of aggregate in DDoS attack, RCS takes DDoS attack problem as a way of flow control to simplify the situation and deploys the flow controller at the routers near the victims. As the key point of our mechanism, an algorithm is designed to differentiate the malicious packets and the normal ones and we classify the packets according to TCP flags in order to tell different flows apart. In addition we detect the malicious aggregate using correlation analysis to make clear the type and the location of the attack. Simulation results demonstrate the performance for detecting the Link Flooding DDoS attacks.
机译:DoS / DDoS攻击,尤其是Link Flooding,对Internet造成了严重威胁。在本文中,我们基于上层链路流的相关性分析,提出了一种新的机制,称为针对链路泛洪的速率控制系统(RCS)。根据DDoS攻击中聚合的特性,RCS将DDoS攻击问题作为流控制的一种方式来简化情况,并将流控制器部署在受害者附近的路由器上。作为该机制的关键,设计一种算法来区分恶意数据包和正常数据包,并根据TCP标志对数据包进行分类,以区分不同的流。此外,我们使用相关分析来检测恶意聚集,以明确攻击的类型和位置。仿真结果证明了检测链接泛洪DDoS攻击的性能。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号