There is no satisfactory solution yet to deal with the multicast DoS attack.A simple dynamic firewall algorithm was proposed to ensure the multicast safety while keep the efficiency of the firewall.By maintaining state information of multicast members and unicast interactive situation
the algorithm
in which the unicast firework mechanism was referenced
can identify and discard unsolicited multicast packet in most cases to protect the network against denial-of-service attack.The efficiency and extensibility of the algorithm were experimentally tested and its feasibility was proved.
关键词
Keywords
references
Deering S,Cheriton D.Multicast routing in datagram internetworks and extended LANs[J].ACM Transactions onComputer Systems,1990,8(2):85-110.
Ratnasamy S,Ermolinskiy A,Shenker S.Revisiting IP multicast[C].In Proceedings of ACM Sigcomm,Pisa,Italy,2006.
高永仁.拒绝服务攻击及防御措施[J].信息技术,2009(3):85-87.Gao Yongren.Denial of service attack and defence measures[J].Information Technology,2009(3):85-87.(inChinese)
Holbrook H,Cheriton D.IP multicast channels:express support for single-source multicast applications[C].InProceedings of ACM Sigcomm,Cambridge,MA,1999.
章建国,陈欢.DDoS硬件防火墙技术研究[J].信息网络安全,2010(12):55-56.Zhang Jianguo,Chen Huan.Research on DDoS hardware firewall[J].Netinfo Security,2010(12):55-56.(inChinese)
陈思.拒绝服务(DOS)攻击方法及防范措施[J].应用能源技术,2008(11):46-47.Chen Si.The attacking method and the defense strategies of denial of service[J].Applied Energy Technology,2008(11):46-47.(in Chinese)
袁薇.拒绝服务攻击DoS的研究与防范[J].电脑与信息技术,2009(3):67-69.Yuan Wei.Research and defense of denial of service[J].Computer and Information Technology,2009(3):67-69.(in Chinese)