检索结果-南通市图书馆

traceback in wireless sensor networks with packet marking and logging

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Frontiers of Materials Science 2011年第3期5卷 308-315页

作者： Jun XU Xuehai ZHOU Feng YANG Department of Computer Science University of Science and Technology of China Hefei 230026 China Suzhou Institute for Advance Study University of Science and Technology of China Suzhou 215123 China

In a hostile environment, sensor nodes may be compromised and then be used to launch various attacks. One severe attack is false data injection which is becoming a serious threat to wireless sensor networks. An attacker uses the compromised node to flood the network and exhaust network resources by injecting a large number of bogus packets. In this paper, we study how to locate the attack node using a framework of packet marking and packet logging. We propose a combined packet marking and logging scheme for traceback （CPMLT）. In CPMLT, one packet can be marked by up to M nodes, each node marks a packet with certain probability. When one packet is marked by M nodes, the next marking node will log this packet. Through combining packet marking and logging, we can reconstruct the entire attack path to locate the attack node by collecting enough packets. In our simulation, CPMLT achieves fast traceback with little logging overhead.

关键词： wireless sensor networks traceback packetmarking packet logging

A Coding-Based Incremental traceback Scheme against DDoS Attacks in MANET

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Communications and Network 2013年第3期5卷 478-484页

作者： Yinan Jing Qiang Jiang Xiaochun Xiao Xueping Wang School of Computer Science Fudan University Shanghai China

Due to constrained resources, DDoS attack is one of the biggest threats to MANET. IP traceback technique is useful to defend against such type of attacks, since it can identify the attack sources. Several types of traceback schemes have been proposed for wired networks. Among all the existing schemes, probabilistic packet marking (PPM) scheme might be the most promising scheme for MANET. However its performance in MANET is not as good as that in Internet. In this paper, a new scheme based on the codingtechnique (CT) is proposed for traceback in MANET. Furthermore, a new idea of Incremental traceback is raised to cope with the situation of incremental attack (ICT). We present the protocol design and conduct theoretical analysis of this scheme. Additionally, we conduct experiments to compare it with the traditional PPM scheme. The experimental results show that the new coding-based traceback scheme outperforms the PPM scheme in MANET.

关键词： IP traceback MANET Coding DDoS Incremental traceback

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

IP traceback技术综述

通讯和计算机（中英文版） 2005年第10期2卷 58-62页

作者：徐德启黄春晖李大伟王祺兰州大学信息科学与工程学院软件与理论研究所兰州730000 甘肃移动通信公司计费业务中心兰州730000

拒绝服务攻击（DoS）和分布式拒绝服务攻击（DDoS）一直是网络上使用频率最高的攻击方式。为了能够找到网络攻击的发起源以便对攻击发起人进行法律和经济上的惩罚，也为了威慑那些试图进行网络攻击的人以减少攻击发起的数量，人们开始研... 详细信息

拒绝服务攻击（DoS）和分布式拒绝服务攻击（DDoS）一直是网络上使用频率最高的攻击方式。为了能够找到网络攻击的发起源以便对攻击发起人进行法律和经济上的惩罚，也为了威慑那些试图进行网络攻击的人以减少攻击发起的数量，人们开始研究IP traceback技术。本文系统地介绍了各种IP traceback技术的研究成果，对其在性能和效率上做了纵向和横向的比较，并对该技术的发展趋势做了简单的分析。

关键词： IP traceback DoS DDoS Network Security

基于入侵检测系统的IP traceback机制研究

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

网络安全技术与应用 2008年第1期 19-21页

作者：李繁严星新疆财经大学信息化中心新疆830012

本文结合"入侵检测系统(IDS)",当IDS检测到可疑封包时,即发送命令要求边界路由器对所经过的封包执行签名,而在受害者端IDS可透过验证封包上的签名,找到攻击封包的来源地址。

关键词：拒绝服务攻击 IP traceback 椭圆曲线密码系统身份签名

A Defense Framework against DDoS in a Multipath Network Environment

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Communications and Network 2015年第2期7卷 106-116页

作者： Ahmed Redha Mahlous Department of Computer and Information Sciences Prince Sultan University Riyadh Saudi Arabia

The Internet is facing a major threat, consisting of a disruption to services caused by distributed denial-of-service (DDoS) attacks. This kind of attacks continues to evolve over the past two decades and they are well known to significantly affect?companies and businesses. DDoS is a popular choice among attackers community. Such attack can easily exhaust the computing and communication resources of its victim within a short period of time. Many approaches to countering DDoS attacks have been proposed, but few have addressed the use of multipath. In this paper, we analyze, how multipath routing based solutions could be used to address the DDoS problem. The proposed framework traces back the attack to its source and blocks it. It also calculates multiple paths to the attacker (if they exist) and alerts all gateways near the attacker to block possible traffic originating from this source in case another path(s) is (are) later used to attack the victim again. We demonstrate that our scheme performs better that other single path schemes.

关键词： DDoS Multipath Filtering traceback