基于網(wǎng)絡(luò)效用最大化的DDoS攻擊主動(dòng)防御機(jī)制研究.pdf

1、華中科技大學(xué)碩士學(xué)位論文基于網(wǎng)絡(luò)效用最大化的DDoS攻擊主動(dòng)防御機(jī)制研究姓名：田正先申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：通信與信息系統(tǒng)指導(dǎo)教師：譚運(yùn)猛20110115華中科技大學(xué)碩士學(xué)位論文IIAbstractAmongmassofwksecurityeventsDDoS(DistributedDenialofService)attackshavebeenoneofthemajthreatsofwksecurityfitsinherentsimpl

2、icityofoperationdamageseveritydifficultyofdefense.TherefetheresearchaboutnewmeansofDDoSattacksdefenseissignificant.ThispaperfirstlyintroducesthreetypesofdefensetechnologyfDDoSattackbythedifferenceoftheirdeployedlocations

3、thenintroducestheconceptsoftheNUM(wkUtilityMaximization)dualitythey.ThenwefocusonthebroadbbasedDDoSattackswhichhavelargeharmcouldblockthewkrapidlybefethedefensesystem’sresponseparalyzedalargenumberofwktransmissionnodes.I

4、nthissituationevenifsomelegitimateaccessdataflowsisnotinthedirectscopeoftheattackbutiftheypassthroughsometrafficroutewhichtheattackflowsontheywillalsobeveryseriousdamaged.Giventheabovethispaperproposedaproactivedefenseme

5、chanismbasedonthewkutilitymaximization(NUMPDM).Thisproactivedefensemechanismisdeployedonthedlewkamongtheattackers’sourcewktheunderattackterminatingwkwhichasadefensivefrontedgefDDoSattacks.TheNUMPDMsprimarygoalistoprovide

6、alooseisolationbwidthfeachtrafficflowwhichpassedthroughthecebackbonewkbymaximizingthewkresourcetominimumthecollateraldamageontheselegitimateflowswhenDDoSattackshappenmakefurthercontainmentincaseoftheidentificationoftheat

7、tacktrafficsoastoachievethepurposeofdefenseagainstDDoSattacks.Finallywebuildawkmodelbysimulatingtherealcebackbonewkuserealdataofnmaltrafficattackflowstoassesstheeffectivenessoftheactivedefensemechanismsinthispaperfromthr

8、eeindicatsfinallytheexperimentaldatashowthatthedefensemechanismscansignificantlyreducethecollateraldamageonthenmaltrafficflowswhichattackflowsbring.Keywds:wksecurityDistributedDenialofService(DDoS)ProactiveDefenseMechani