基于網(wǎng)絡(luò)效用最大化的DDoS攻擊主動防御機制研究.pdf

1、華中科技大學(xué)碩士學(xué)位論文基于網(wǎng)絡(luò)效用最大化的DDoS攻擊主動防御機制研究姓名：田正先申請學(xué)位級別：碩士專業(yè)：通信與信息系統(tǒng)指導(dǎo)教師：譚運猛20110115華中科技大學(xué)碩士學(xué)位論文IIAbstractAmongmassofwksecurityeventsDDoS(DistributedDenialofService)attackshavebeenoneofthemajthreatsofwksecurityfitsinherentsimpl

2、icityofoperationdamageseveritydifficultyofdefense.TherefetheresearchaboutnewmeansofDDoSattacksdefenseissignificant.ThispaperfirstlyintroducesthreetypesofdefensetechnologyfDDoSattackbythedifferenceoftheirdeployedlocations

3、thenintroducestheconceptsoftheNUM(wkUtilityMaximization)dualitythey.ThenwefocusonthebroadbbasedDDoSattackswhichhavelargeharmcouldblockthewkrapidlybefethedefensesystem’sresponseparalyzedalargenumberofwktransmissionnodes.I

4、nthissituationevenifsomelegitimateaccessdataflowsisnotinthedirectscopeoftheattackbutiftheypassthroughsometrafficroutewhichtheattackflowsontheywillalsobeveryseriousdamaged.Giventheabovethispaperproposedaproactivedefenseme

5、chanismbasedonthewkutilitymaximization(NUMPDM).Thisproactivedefensemechanismisdeployedonthedlewkamongtheattackers’sourcewktheunderattackterminatingwkwhichasadefensivefrontedgefDDoSattacks.TheNUMPDMsprimarygoalistoprovide

6、alooseisolationbwidthfeachtrafficflowwhichpassedthroughthecebackbonewkbymaximizingthewkresourcetominimumthecollateraldamageontheselegitimateflowswhenDDoSattackshappenmakefurthercontainmentincaseoftheidentificationoftheat

7、tacktrafficsoastoachievethepurposeofdefenseagainstDDoSattacks.Finallywebuildawkmodelbysimulatingtherealcebackbonewkuserealdataofnmaltrafficattackflowstoassesstheeffectivenessoftheactivedefensemechanismsinthispaperfromthr

8、eeindicatsfinallytheexperimentaldatashowthatthedefensemechanismscansignificantlyreducethecollateraldamageonthenmaltrafficflowswhichattackflowsbring.Keywds:wksecurityDistributedDenialofService(DDoS)ProactiveDefenseMechani