邱菡,,
朱俊虎,
王清贤,
陈迪
1.战略支援部队信息工程大学 郑州 450001
2.国家数字交换系统工程技术研究中心 郑州 450001
基金项目:国家自然科学基金(61502528)
详细信息
作者简介:曾子懿：男，1989年生，讲师，研究方向为网络安全、路由系统、复杂网络
邱菡：女，1981年生，副教授，研究方向为网络安全、复杂网络
朱俊虎：男，1974年生，教授，研究方向为网络安全
王清贤：男，1960年生，教授，研究方向为计算理论、网络安全
陈迪：女，1992年生，博士生，研究方向为网络安全、路由系统、复杂网络
通讯作者:邱菡 qiuhan410@aliyun.com
中图分类号:TN915.08计量
文章访问数:416
HTML全文浏览量:156
PDF下载量:24
被引次数:0
出版历程
收稿日期:2020-01-02
修回日期:2020-08-05
网络出版日期:2020-08-13
刊出日期:2020-09-27
Research on Target Failure Link Location Method in Inter-domain Routing System Cascading Failure
Ziyi ZENG,Han QIU,,
Junhu ZHU,
Qingxian WANG,
Di CHEN
1. Information Engineering University, Zhengzhou 450001, China
2. National Digital Switching System Engineering & Technological Research Center, Zhengzhou 450001, China
Funds:The National Natural Science Foundation of China (61502528)
摘要
摘要:协同跨平面会话中断攻击(CXPST)通过反复对多条目标关键链路实施低速率拒绝服务攻击(LDoS)造成域间路由系统的级联失效，从而导致互联网的崩溃。在攻击发生的初期，准确定位受攻击的关键链路并进行针对性防御可遏制级联失效的发生。现有定位方法研究主要基于单源假设，没有考虑多条目标链路同时失效对路径撤回的影响，定位准确度受限。针对上述问题，该文提出一种基于加权统计匹配得分的多失效链路定位方法(WSFS)，以级联失效攻击目标链路选择策略作为推断基础，将撤销路径长度的倒数作为权重对评分进行加权。基于实际网络拓扑和有利点位置的级联失效攻击仿真实验结果表明，WSFS比目前最优方法平均准确率可提升5.45%。实验结果证明WSFS相比于其他定位方法更适合应对域间路由系统级联失效下的目标失效链路定位问题。
关键词:多失效链路定位/
域间路由系统/
级联失效/
路径长度加权
Abstract:Coordinated Cross Plane Session Termination (CXPST) repeatedly implements Low rate Denial of Service (LDoS) attacks on multiple target critical links, causing the cascading failure of the inter-domain routing system and the collapse of the internet. In the early stages of an attack, accurately locating the critical link under attack and carrying out targeted defense can prevent the occurrence of cascading failures. The research on existing locating methods is mainly based on the single-source hypothesis, and does not consider the impact of simultaneous failure of multiple target links on path withdrawal, so the locating accuracy is limited. To solve the above problems, a locating method is proposed based on Weighted Statistical Fit Score (WSFS). Using the target link selection strategy of cascading failure attack as inferring basis, scores are weighted by the reciprocal of the length of the withdrawal paths. The simulation results based on the actual network topology and vantage point location show that WSFS can improve the average accuracy rate by 5.45% compared with the current optimal method. Experimental results prove that WSFS is more suitable for locating target failure links in inter-domain routing system cascading failure than other locating methods.
Key words:Multiple failure link location/
Inter-domain routing system/
Cascading failure/
Path length weighting
PDF全文下载地址:
https://jeit.ac.cn/article/exportPdf?id=a5568494-6bf6-414f-963e-34e2cd45b264
