• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>International Conference on Networking, Architecture, and Storage >Mitigating Denial of Capability with An Notification Mechanism
【24h】

Mitigating Denial of Capability with An Notification Mechanism

机译：通过通知机制减轻拒绝能力

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Denial-of-Service (DoS) attacks is a major threat to Internet security. Among numerous defense techniques, recently architecture-level capabilities scheme is a promising one. As a typical and comprehensive capabilities scheme, Traffic Validation Architecture (TVA) tries to limit DoS attacks essentially and completely. Yet its effectiveness suffers from a new kind of DoS attacks, Denial-of-Capability (DoC), which takes place in the connection-setup step when clients send requests for capabilities. To overcome the DoC attacks, potential attack characteristics are analyzed in detail. And a notification-based mechanism is proposed to mitigate DoC attacks and enhance the robustness of TVA. A capability-enabled router should send a reverse notification with a special and unforgeable source identifier to the source when it has to drop a request packet under DoC attacks. Then an enhanced request packet including the source identifier is returned by the source and verified by the router. The enhanced request packet with higher secure level is processed in enhanced channels instead of unprivileged channels. Moreover enhanced requests are fair-queued based on per-source instead of per-Pi in TVA. Theoretical analysis and simulation results show that the notification mechanism can suppress DoC attacks effectively and make the capabilities architecture more robust and practical.
机译：拒绝服务（DOS）攻击是对互联网安全的主要威胁。在众多防御技术中，最近的建筑级功能方案是有希望的。作为典型和综合的能力方案，流量验证架构（TVA）试图基本上完全限制DOS攻击。然而，当客户端发送能力请求时，它的有效性遭受了新的DOS攻击，拒绝能力（DOC），它在连接设置步骤中进行。为了克服DOC攻击，详细分析潜在的攻击特征。并提出了一种基于通知的机制来缓解DOC攻击并增强TVA的鲁棒性。启用能力的路由器应在源在DOC攻击下删除请求数据包时向源发送反向通知。然后由源返回包括源标识符的增强请求包，并由路由器验证。具有更高安全级别的增强型请求数据包在增强频道而不是未特权的信道中处理。此外，增强的请求是基于每次来源而不是TVA中的每PI的公平排队。理论分析和仿真结果表明，通知机制有效地抑制了DOC攻击，使能力架构更加强大，实用。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号