Method of network security situation assessment under DDoS attacks

doi:10.3778/j.issn.1002-8331.2009.27.027

Computer Engineering and Applications ›› 2009, Vol. 45 ›› Issue (27): 88-91.DOI: 10.3778/j.issn.1002-8331.2009.27.027

• 网络、通信、安全 • Previous Articles Next Articles

Method of network security situation assessment under DDoS attacks

LI Ke^1，3，LIAN Yi-feng^1，2，3

1.State Key Laboratory of Information Security，Graduate University，Chinese Academy of Sciences，Beijing 100049，China
2.Institute of Software，Chinese Academy of Sciences，Beijing 100190，China
3.Graduate University，Chinese Academy of Sciences，Beijing 100190，China

Received:2008-11-03 Revised:2009-02-26 Online:2009-09-21 Published:2009-09-21
Contact: LI Ke

一种面向DDoS攻击的网络安全态势评估方法

李珂^1，3，连一峰^1，2，3

1.中国科学院研究生院信息安全国家重点实验室，北京 100049
2.中国科学院软件研究所，北京 100190
3.中国科学院研究生院，北京 100190

通讯作者: 李珂

Abstract

Abstract: This paper analyzes the impacts that all congested links cause on application servers and network architecture，introduces graph algorithms and presents a new method to assess the network security situation under DDoS attacks，which computes the influence value that attacks cause on network security situation according to the distance between the congested link and application server and whether the link is in the min-cut set，and this value is used for quantitative situation assessment.The applicability of this method is verified by simulated experiments with the network simulation tool.

Key words: security situation, situational assessment, DDoS attack, graph theory, link-congestion degree

摘要： 从网络拥塞对应用服务器及网络结构造成的影响出发，引入图论的相关算法，提出一种面向DDoS攻击的网络安全态势评估方法，根据拥塞链路与服务器的距离以及拥塞链路是否处于网络映射图的最小边割集内，计算攻击行为对网络安全态势的影响值，以此进行态势的量化分析。最后使用网络仿真工具验证了该方法的适用性。

关键词: 安全态势, 态势评估, DDoS攻击, 图论, 链路拥塞度

CLC Number:

TP393.08

LI Ke^1，3，LIAN Yi-feng^1，2，3. Method of network security situation assessment under DDoS attacks[J]. Computer Engineering and Applications, 2009, 45(27): 88-91.

李珂^1，3，连一峰^1，2，3. 一种面向DDoS攻击的网络安全态势评估方法[J]. 计算机工程与应用, 2009, 45(27): 88-91.

[1]	MENG Yun, HU Xin, DAI Liang, YU Lei. Connectivity Improvement Resource Allocation Algorithm in Interference Vehicular Networks [J]. Computer Engineering and Applications, 2019, 55(7): 9-15.
[2]	LIU Kang1, ZHANG Xueying1, LI Fenglian1, TIAN Yuchu1，2. Graph partitioning method for social networks based on communication load balancing [J]. Computer Engineering and Applications, 2018, 54(4): 66-71.
[3]	GONG Chen, WU Lifang, LIU Weichan, ZHANG Xin. Choosability of signed graphs without certain minors [J]. Computer Engineering and Applications, 2018, 54(16): 55-58.
[4]	LIU Weichan, ZHANG Xin. Equitable vertex arboricity of outer-1-planar graphs [J]. Computer Engineering and Applications, 2018, 54(10): 51-53.
[5]	CHEN Jizhen, NING Aibing, ZHI Zhibing, HU Linlin, ZHANG Huizhen. Exact algorithm for maximum independent set problem in graph theory [J]. Computer Engineering and Applications, 2016, 52(1): 20-22.
[6]	CHEN Hong1, WANG Fei1, XIAO Zhenjiu1，2, SUN Lina1. Network security situation assessment model fusing multi-source data [J]. Computer Engineering and Applications, 2015, 51(17): 96-101.
[7]	CHEN Hong1, WANG Fei1, XIAO Zhenjiu1，2, SUN Lina1. Method of network security situation prediction based on IHS_LSSVR [J]. Computer Engineering and Applications, 2014, 50(23): 91-94.
[8]	ZHANG Han1, HE Dongjian2. Image segmentation approach by combining texture information and graph theory [J]. Computer Engineering and Applications, 2014, 50(1): 180-184.
[9]	HAN Zhong1，2, ZHAO Shengdun2, ZHANG Guicheng2，3, RUAN Weiping3, LI Jianping3, SHEN Hongli3. Automatic structural modeling method based on process manufacturing system identifications [J]. Computer Engineering and Applications, 2014, 50(1): 227-231.
[10]	HE Yongming. Assessment model of network security situation based on K Nearest Neighbor and Support Vector Machine [J]. Computer Engineering and Applications, 2013, 49(9): 81-84.
[11]	CAO Dun, CHEN Ziqi. New localization algorithm for wireless sensor networks [J]. Computer Engineering and Applications, 2012, 48(8): 116-118.
[12]	CHEN Shanchao, FU Hongguang, WANG Ying. Application of improved graph theory image segmentation algorithm in tongue image segmentation [J]. Computer Engineering and Applications, 2012, 48(5): 201-203.
[13]	LI Lijuan1，2, LI Shaodong1. Application of adaptive clustering algorithm on DDoS attacks detection [J]. Computer Engineering and Applications, 2012, 48(2): 86-89.
[14]	LAN Meihui1，XU Jian1，SUN Yu2. Ontology similarity computation based on spectral graph theory [J]. Computer Engineering and Applications, 2011, 47(28): 110-112.
[15]	YANG Jinglin，WANG Chengru. Adaptive texture image retrieval based on spectral graph theory [J]. Computer Engineering and Applications, 2011, 47(22): 195-197.

Method of network security situation assessment under DDoS attacks

一种面向DDoS攻击的网络安全态势评估方法

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics