Collaborative detection of DDoS attacks based on chord protocol
Collaborative detection of DDoS attacks based on chord protocol
复制标题
基于chord协议的DDoS攻击协同检测
DOI：
--
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Yongjun Wang
中科院分区：
文献类型：
--
作者：
Z. Han;Xiaofeng Wang;Fei Wang;Yongjun Wang
提出了一种新的分布式拒绝服务（DDoS）攻击检测方法.利用边缘网络上的监控器将网络流量信息记录在一个Sketch矩阵中，得到可疑攻击流量信息作为本地检测结果。然后，所有发现同一目的IP可疑信息的监控器组织成一个AutoTree，以协同聚合本地检测结果。本地检测信息将逐步聚集在AutoTree中，而AutoTree的根将负责目标确认的最终决策。为了验证所提出的方法，我们在一个模拟网络中进行了实验。比较了协同分布式检测（CDD）、基于路由分布的检测（RDBD）和单点检测（SPD）三种检测方法的检测时间、检测率。
This paper propose a new method for detecting distributed denial of service (DDoS) attack. By using the monitors on the edge network to record the traffic information in a Sketch matrix, we can get the suspicious attack traffic information as the local detection result. Then, all the monitors that have found suspicious information about the same destination IP organize into an AutoTree to collaborative aggregate the local detection result. The local detection information will be aggregated in the AutoTree step by step, while the root of the AutoTree will be in charge of the final decision for the target confirmation. In order to verify the proposed method, we do the experiments in a simulated network. We compare the detection time, detection rate between three detection methods: Collaborative Distributed Detection (CDD), Routing Distribution Based Detection (RDBD) and Single Point Detection (SPD).