作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2009, Vol. 35 ›› Issue (3): 195-198. doi: 10.3969/j.issn.1000-3428.2009.03.066

• 安全技术 • 上一篇    下一篇

基于战略博弈的DDoS攻防绩效评估方法

石 盼1,2,连一峰1,2   

  1. (1. 信息安全国家重点实验室,北京 100080;2. 中国科学院研究生院,北京 100080)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2009-02-05 发布日期:2009-02-05

Efficiency Evaluation Methodology of DDoS Attack and Defense Based on Strategic Game

SHI Pan1,2, LIAN Yi-feng1,2   

  1. (1. State Key Laboratory of Information Security, Beijing 100080; 2. Graduate University of Chinese Academy of Sciences, Beijing 100080)
  • Received:1900-01-01 Revised:1900-01-01 Online:2009-02-05 Published:2009-02-05

摘要: 提出一种基于战略博弈的DDoS攻防策略绩效评估方法,针对当前DDoS攻击防范策略中基于速率限制的防范机制,利用博弈论方法对DDoS攻防双方进行建模,对LACC和Pushback防范策略的绩效进行定量评估,分析不同策略在不同攻击场景下的性能和防范效果。针对典型的DDoS攻击场景,利用网络仿真工具进行模拟实验,通过计算攻防双方的混合战略纳什均衡评估防范策略的绩效验证该方法的适用性和有效性。

关键词: 战略博弈, DDoS防范策略, 速率限制, 绩效评估

Abstract: This paper presents a new efficiency evaluation methodology of Distributed Denial of Service(DDoS) attack and defense mechanisms based on strategic game. Aiming at rate-limiting defense mechanisms in current DDoS defense strategies, it proposes a game theory method to model DDoS attack and defense systems, and evaluates LACC and Pushback mechanisms’ efficient quantitatively, which results in an efficient analysis for defense performances of different strategies in different attack scenarios. This paper uses network simulation tools to implement simulating experiments under typical DDoS attack scenarios, and validates the applicability of the method through computing both players’ mixed strategy Nash equilibriums.

Key words: strategic game, Distributed Denial of Service(DDoS) defense strategy, rate-limiting, efficiency evaluation

中图分类号: