| 摘要: |
| DDoS攻击是网络中最大的威胁之一,选取合适的防护措施,能够更加有效地保护目标网络和目标系统.现有的评价方法对于防护措施选择的指导性不足.针对该问题,首先构建了面向DDoS攻击的防护措施遴选模型(DCSM).在此基础之上,提出基于多属性决策的DDoS防护措施遴选算法.以多属性决策方法综合考虑各方面评估指标;从攻防两方面,以基于历史攻击偏好的方法和熵权法计算重要性权重,消除了传统评价方法中人为指定权重带来的主观性影响.提出的方法为防护措施的选择提供了参考,并通过模拟实验验证了方法的适用性和有效性. |
| 关键词: 多属性决策 DDoS 安全防护 措施遴选 安全评估 |
| DOI：10.13328/j.cnki.jos.004673 |
| 分类号: |
| 基金项目:国家高技术研究发展计划(863)(SQ2013GX02D01211); 国家自然科学基金(61100226, 61303248); 北京市自然科学基金(4122085, 4144089); “十二五”国家科技支撑计划(2012BAK26B01) |
|
| Method of DDoS Countermeasure Selection Based on Multi-Attribute Decision Making |
|
HUANG Liang1, FENG Deng-Guo1, LIAN Yi-Feng1, CHEN Kai2, ZHANG Ying-Jun1, LIU Yu-Ling1
|
|
1.Trusted Computing and Information Assurance Laboratory, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China;2.Institute of Information Engineering, The Chinese Academy of Sciences, Beijing 100195, China
|
| Abstract: |
| DDoS is one of the biggest threat in the network. Using the proper countermeasure will notably improve the security level of the target network and/or target system. Existing security evaluation methods don't provide sufficient support for countermeasure selection. To solve the problem, this paper builds a DDoS countermeasure selection model (DCSM), and then proposes the DDoS countermeasure selection method. The method not only takes advantage of multi-attribute decision making theory to evaluate multi- dimension metrics, but also uses historical attack preference based method and entropy method to calculate the weight from both attack and defense perspectives, thus reducing the subjective factors in conventional methods. The correctness and the applicability of the method are validated by the experiments. |
| Key words: multi-attribute decision making DDoS security countermeasure countermeasure selection security evaluation |
