基于NFV的新的协作式DDoS防御技术

许传丰; 林晖; 郭烜成; 汪晓丁

doi:10.11959/j.issn.2096-109x.2019018

您当前的位置：

首页 >

文章列表页 >

基于NFV的新的协作式DDoS防御技术

学术论文 | 更新时间：2024-06-03

- 基于NFV的新的协作式DDoS防御技术
- New collaborative DDoS defense technology based on NFV
- 网络与信息安全学报 2019年5卷第2期页码：66-76
- 作者机构：
  
  1. 福建师范大学数学与信息学院，福建福州 350117
  2. 福建师范大学福建省网络安全与密码技术重点实验室，福建福州 350117
- 作者简介：
  
  [ "许传丰（1994- ），男，江苏宿迁人，福建师范大学硕士生，主要研究方向为网络安全、博弈论。" ]
  [ "林晖（1977- ），男，福建福州人，博士，福建师范大学副教授、硕士生导师，主要研究方向为信任管理、无线网络信息安全、移动云计算。" ]
  [ "郭烜成（1995- ），女，福建龙岩人，福建师范大学硕士生，主要研究方向为网络安全、机器学习。" ]
  [ "汪晓丁（1982- ），男，福建福州人，福建师范大学讲师，主要研究方向为网络优化与无线通信网络。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(61772008);福建省引导基金资助项目;Pilot Project of Fujian Province(2016Y0031);福州市科技局基金资助项目;Fuzhou Science and Technology Bureau Fund Funding Project(2017-G-79);福建省自然科学基金资助项目;The Natural Science Foundation of Fujian Province(2016J01289)
- DOI：10.11959/j.issn.2096-109x.2019018
  中图分类号： TP393.08
- 网络首发：2019-04，
  
  纸质出版：2019-04-15
- 稿件说明：
移动端阅览
许传丰, 林晖, 郭烜成, 等. 基于NFV的新的协作式DDoS防御技术[J]. 网络与信息安全学报, 2019,5(2):66-76.

Chuanfeng XU, Hui LIN, Xuancheng GUO, et al. New collaborative DDoS defense technology based on NFV[J]. Chinese Journal of Network and Information Security, 2019, 5(2): 66-76.
许传丰, 林晖, 郭烜成, 等. 基于NFV的新的协作式DDoS防御技术[J]. 网络与信息安全学报, 2019,5(2):66-76. DOI： 10.11959/j.issn.2096-109x.2019018.

Chuanfeng XU, Hui LIN, Xuancheng GUO, et al. New collaborative DDoS defense technology based on NFV[J]. Chinese Journal of Network and Information Security, 2019, 5(2): 66-76. DOI： 10.11959/j.issn.2096-109x.2019018.

摘要

在采取网络功能虚拟化技术构建的协作式网络抵御分布式拒绝服务攻击的过程中，由于协作网络中的资源有限，协作网络中的参与者存在为了自身安全而采取自私行为的问题，进而减弱协作网络缓解 DDoS攻击能力。针对上述问题，提出了一种新的缓解DDoS攻击策略。该策略在协作网络中构建重复囚徒困境博弈模型，引入奖罚分明激励机制加强协作网络的合作性，并采取基于社会信誉值评估的动态资源分配机制。仿真实验表明，新的协作式DDoS攻击防御技术在分组丢失率、合作性和资源分配率方面优于现有方案，提高了DDoS攻击防御的有效性。

Abstract

To solve the problem of selfish behavior for self-security due to limited resources in the process of resisting distributed denial of service (DDoS) attacks by a collaborative network built with network function virtualization (NFV) technology

a new collaborative DDoS defense network model was proposed.a repeat prisoner's dilemma game model was built in the collaborative network

a reward and punishment incentive mechanism was introduced to strengthen the cooperation of the collaborative network

and a dynamic resource allocation mechanism based on social reputation value assessment was adopted.Simulation results show that the new collaborative DDoS attack defense technology outperforms existing solutions in terms of packet loss rate

cooperation

and resource allocation rate

improving the effectiveness of DDoS attack defense.

关键词

Keywords

references

YAN Q , YU F R , GONG Q , et al . Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments:a survey,some research issues,and challenges [J ] . IEEE Communications Surveys ＆ Tutorials , 2016 , 18 ( 1 ): 602 - 622 .

MIRKOVIC ， REIHER P . A taxonomy of DDoS attack and DDoS defense mechanisms [J ] . ACM SIGCOMM Computer Communication Review , 2004 , 34 ( 2 ): 39 - 53 .

CHANG R K C . Defending against flooding-based distributed denial-of-service attacks:a tutorial [J ] . Communications Magazine IEEE , 2002 , 40 ( 10 ): 42 - 51 .

HERRERA J G , BOTERO J F . Resource allocation in NFV:a comprehensive survey [M ] . IEEE Press , 2016 .

RASHIDI B , FUNG C , BERTINO E . A collaborative DDoS defence framework using network function virtualization [C ] // 2016 12th International Conference on Network and Service Management (CNSM) . 2016 .

FENG L , YANG Q , KIM K , et al . Dynamic rate allocation and forwarding strategy adaption for wireless networks [J ] . IEEE Signal Processing Letters , 2018 , 25 ( 7 ): 1034 - 1038 .

FAYAZ S K , TOBIOKA Y , SEKAR V , et al . Bohatei:flexible and elastic DDoS defense [C ] // Usenix Conference on Security Symposium . 2015 : 817 - 832 .

GUENANE F , NOGUEIRA M , SERHROUCHNI A . DDoS mitigation cloud-based service [C ] // IEEE Trustcom/Bigdatase/ISPA . 2015 : 1363 - 1368 .

FUNG C J , MCCORMICK B . VGuard:a distributed denial of service attack mitigation method using network function virtualization [C ] // International Conference on Network and Service Management . 2015 : 64 - 70 .

RASHIDI B , FUNG C , RAHMAN M . A scalable and flexible DDoS mitigation system using network function virtualization [C ] // IEEE/IFIP Network Operations and Management Symposium . 2018 : 1 - 6 .

JAKARIA A H M , YANG W , RASHIDI B , et al . VFence:a defense against distributed denial of service attacks using network function virtualization [C ] // Computer Software and Applications Conference . 2016 : 431 - 436 .

LUO C , ZHANG X , LIU H , et al . Cooperation in memory-based prisoner’s dilemma game on interdependent networks [J ] . Physica A Statistical Mechanics ＆ Its Applications , 2016 , 450 : 560 - 569

PERC M , SZOLNOKI A . Social diversity and promotion of cooperation in the spatial prisoner’s dilemma [J ] . Physical Review E Statistical Nonlinear ＆ Soft Matter Physics , 2008 , 77 ( 1 Pt 1 ):011904.

ASHLOCK D , KIM E Y , ASHLOCK W . A fingerprint comparison of different prisoner's dilemma payoff matrices [J ] . IEEE Transportations on Biological Science , 2010 ( 6 ): 219 - 226 .

YANG H X , WU Z X , RONG Z , et al . Peer pressure:enhancement of cooperation through mutual punishment [J ] . Phys Rev E Stat Nonlin Soft Matter Phys , 2015 , 91 ( 2 ):022121.

XU Z , LIANG W , GALIS A , et al . Throughput optimization for admitting NFV-enabled requests in cloud networks [J ] . Computer Networks , 2018

浏览量

848

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向网络安全资源池的智能服务链系统设计与分析

面向SDN/NFV环境的网络功能策略验证

基于免疫算法的网络功能异构冗余部署方法

网络功能虚拟化环境中大规模资源状态监测策略