基于神经网络的DDoS防护绩效评估

CORC > 软件研究所 > 软件所图书馆 > 期刊论文

	基于神经网络的DDoS防护绩效评估
	黄亮 ; 冯登国 ; 连一峰 ; 陈恺
刊名	计算机研究与发展
	2013
卷号	50 期号:10 页码:2100-2108
关键词	安全评估人工神经网络分布式拒绝服务绩效评估
ISSN号	1000-1239
其他题名	Artificial-Neural-Network-Based DDoS Defense Effectiveness Evaluation
中文摘要	面对日益严重的分布式拒绝服务(distributed denial of service, DDoS)攻击威胁和众多防护措施,需要防护绩效评估方法指导防护措施的选择.现有绩效评估方法通过对比防护措施部署前后的攻击效果进行评估,需对防护措施进行卸载及重新部署,实施成本高.针对这种不足,首先建立了防护绩效评估模型(defence evaluation model, DEM),该模型从用户感受角度进行指标选取,减少了传统方式下测评过程需要的指标数量,降低了数据获取的难度.利用神经网络良好的泛化能力,将其引入D DoS防护绩效评估过程;在计算已部署防护措施攻击效果的同时,预测得到未部署防护措施时的攻击效果,减少了测量次数.使用网络仿真程序SSFNet模拟典型攻击场景进行实验,验证了提出的评估方法以及神经网络的预测能力.
英文摘要	In the world facing severe threat of DDoS, finding the best countermeasure will raise the chance of survival. Defense effectiveness evaluation could help determining the best, thus it is an important part of countermeasure selecting. Current existing defense effectiveness evaluation works through comparing the attack effect before and after the deployment of defensive measures. Consequently, if the measure to be evaluated has been deployed, it needs to be removed, and then to be deployed again during the evaluation process. As a result, the cost of defense effectiveness evaluation is high. The cost can be reduced if the evaluation don't have to remove the defensive measure. In this paper, a defense effectiveness evaluation method without removing the defensive measure is proposed. Firstly, the DEM (defense effectiveness model) model is presented. It chooses indices in the perspective of normal user, which reduces the number of indices and the difficulty of measuring. Then, joined with artificial neural network, the DEM model is able to predict the attack effect before the deployment of countermeasures while the countermeasure has bean already deployed. After that, SSFNet, a network simulator, is incorporated to simulate a typical DDoS attack scenario. The result of the simulation not only validates the predictive ability of artificial neural network in DEM model, but also proves the proposed method to be correct.
收录类别	CSCD
语种	中文
CSCD记录号	CSCD:4953099
公开日期	2014-12-16
内容类型	期刊论文
源URL	[http://ir.iscas.ac.cn/handle/311060/16825]
专题	软件研究所_软件所图书馆_期刊论文
推荐引用方式 GB/T 7714	黄亮,冯登国,连一峰,等. 基于神经网络的DDoS防护绩效评估[J]. 计算机研究与发展,2013,50(10):2100-2108.
APA	黄亮,冯登国,连一峰,&陈恺.(2013).基于神经网络的DDoS防护绩效评估.计算机研究与发展,50(10),2100-2108.
MLA	黄亮,et al."基于神经网络的DDoS防护绩效评估".计算机研究与发展 50.10(2013):2100-2108.