移动ad hoc网络中dos攻击及其防御机制new

《移动ad hoc网络中dos攻击及其防御机制new》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、万方数据计算机研究与发展ISSN1000—1239／CN11—1777／TPJournalofComputerResearchandDevelopment42(4)：697～704，2005移动adhoc网络中DoS攻击及其防御机制易平钟亦平张世永(复旦大学计算机与信息技术系上海200433)(pyi—edu@yahoo．com．cn)DoSAttackandDefenseinMobileAdHocNetworksYiPing，ZhongYiping，andZhangShiyong(Dbp口r￡优e，z￡o‘厂Cbmp“ti咒g口，2dj，z如r优

2、n￡如，z殛矗，zozogy，。Fk(缸咒U，zi伽，百缸y，S矗n咒g矗ni200433)AbstractMobileadhocnetworkswilloftenbedeployedinenVironmentswherethenodesofthenetworksareunattendedandhavelittleornophysicalprotectionagainsttampering．Thenodesofmobileadhocnetworksarethussusceptibletocompromise．Thenetworksarepartic

3、ularlyvulnerabletodenialofserVice(DoS)attackslaunchedthrough∞mpromisednodesorintruderS．PresentedinthispaperistheadhocfloOdingattack，anewattack，whichresultsindenialofservicewhenusedagainston—demandroutingprotocolsformobileadhocnetworks，suchasAODV，DSR．Theintruderbroadcastsmassus

4、elessrouterequestpacketsorsendsalotofuselessDATApacketstoexhaustthecommunicationbandwidthandnoderesourcesothatthevalidcommunicationcannotbekept．Afteranalyzingtheattack，fl∞dingattackpreventi。n(FAP)isdeveloped，whichisagenericdefenseagainsttheadhocfloodingattacksinmobileadhocnetw

5、orks．TheFAPiscomposedofneighborsuppressionandpathcutoff．Whentheintruderbroadcastsexceedingpacketsofrouterequest，theimmediateneighborsoftheintruderobserVeahighrateofrouterequestandthentheylowerthecorrespondingpriorityaccordingtotherateofincomingqueries．Moreover，notservicedlowpr

6、iorityqueriesareeventuallydiscarded．WhentheintrudersendsmanyuselessDATApacketstothevictimnode，thenodemaycutoffthepathanddoesnotsetupapathwiththeintruderanymore．TheresultsoftheimplementationshowthatFAPcanpreventtheadhocfloodingattackefficiently．Keywordsmobileadhocnetworks；routi

7、ngprotocol；security；denialofserVice；adhocfl∞dingattack摘要移动adhoc网络由于其动态拓扑、无线信道以及各种资源有限的特点，特别容易遭受拒绝服务(DoS)攻击．提出了移动adhoc网络中一种新的DOS攻击模型——adhocflooding攻击及其防御策略．该攻击主要针对移动adhoc网络中的按需路由协议，如AODV，DSR等．adhocfl∞ding攻击是通过在网络中泛洪发送超量路由查询报文及数据报文，大量地占用网络通信及节点资源，以至于阻塞节点正常的通信．分析adhocfl∞ding攻击之后，

8、提出了两种防御策略：其一是邻居阻止，即当入侵者发送大量路由查询报文时，邻居节点降低对其报文的处理优先级，直至不再接收其报文