High-Potency Models of LDoS Attack Against CUBIC + RED
High-Potency Models of LDoS Attack Against CUBIC + RED
复制标题
针对 CUBIC RED 的 LDoS 攻击的高效模型
DOI：
10.1109/tifs.2021.3117066
复制
发表时间：
2021
影响因子：
6.8
通讯作者：
Minxiao Wang
中科院分区：
文献类型：
--
作者：
Meng Yue;Jing Li;Zhijun Wu;Minxiao Wang
以TCP为目标的低速率拒绝服务(LDOS)攻击利用了TCP拥塞控制机制的漏洞。CUBLE是目前使用最广泛的TCP拥塞控制算法。与传统的传输控制协议相比，立方体传输控制协议提高了对LDOS的弹性。本文研究了在红色队列管理场景下，针对Cubic TCP的LDOS攻击的高效性模式，并相应地提出了两种以最大化攻击能力为目标的攻击模型。通过理论分析和大量实验，验证了这两种模型的功能正确性，并对其性能进行了评价。测试结果表明，这两种攻击模型都能有效地抑制立方TCP吞吐量。在标准配置的网络参数下，对于我们提出的两个模型，一个攻击单元损坏的TCP单元数分别高达21个和26个，攻击能力提高了约20%。并且，我们提出的模型在攻击能力方面比传统的攻击模型至少提高250%。此外，随着不同网络参数的变化，这两种模型仍然是有效的，或者最大化攻击能力。最后，对攻击对策进行了概述。本研究为探索攻击者可能利用的新攻击方式提供了基础，并激励防御者制定针对此类攻击的新措施。
A TCP-targeted Low-rate denial of service (LDoS) attack exploits the vulnerabilities of TCP congestion control mechanism. CUBIC is the most widely used TCP congestion control algorithm today. CUBIC TCP increases the resilience against LDoS over traditional TCP. This paper explores high-potency patterns of the LDoS attack against CUBIC TCP under RED queue management scenario, and accordingly develops two attack models referring to maximizing attack potency. Theoretical analyses and extensive experiments are conducted to validate the proper function of the two models and evaluate their performance. Test results show that the two attack models can effectively throttle CUBIC TCP throughput. Under standard-configured network parameters, the number of TCP units damaged by one attack unit are up to about 21 and 26 respectively for our proposed two models, which represents an increase in attack potency of about 20%. And, our proposed models outperform the traditional attack model in terms of attack potency by at least 250%. In addition, with variations in different network parameters, these two models are still efficient and alternatively maximize the attack potency. Finally, an outline for the attack countermeasure is discussed. The present study offers a basis to explore new attack manners which may be exploited by attackers and excites defenders to develop new measurements against such attack.