低速率DoS攻击的短时分析算法的研究

摘要

The short-time analysis technique was applied to detecting and resisting low-rate DoS (denial of service) attacks. The method implements the detection of low-rate DoS attacks by using the short-time threshold-crossing rate, and realizes the prevention of error reporting in the detecting process by using the short-time magnitude difference (SMD). The short-time analysis technique can help to estimate the attack period, and the estimated period can be used to prevent low-rate DoS attacks. The simulation results show the method using the short-time analysis technology outperforms the traditional frequency-domain transform method.%针对低速率拒绝服务(DoS)攻击难以检测的问题,提出了采用短时分析技术检测和防御低速率DoS攻击的方法.该方法用短时过界率实现低速率DoS攻击的检测,用短时幅度差(SMD)防止检测过程中的误报.短时分析技术和传统的频域变换方法比较,用更低的时间复杂度实现低速率DoS攻击的检测;用修正的短时自相关函数实现攻击周期估计,估计的周期应用在周期规避方法中实现低速率DoS攻击的防御,周期规避防御方法改进了已有的协议修正防御方法.理论分析和仿真结果证明了短时分析技术在实现低速率DoS攻击的检测防御方面具有可行性和优越性.