【摘要】：由于現(xiàn)今的網(wǎng)絡(luò)缺乏源地址驗(yàn)證機(jī)制,導(dǎo)致多種依靠IP欺騙的惡意攻擊時(shí)有發(fā)生。在DHCPv6場(chǎng)景中防止IP欺騙的源地址驗(yàn)證改進(jìn)(SAVI)工作,目前正由互聯(lián)網(wǎng)工程任務(wù)組(IETF)驅(qū)動(dòng),但尚未給出確切的源地址驗(yàn)證方法。為此,提出兩個(gè)驗(yàn)證方法:改進(jìn)的多比特Trie樹算法和改進(jìn)的哈希查找算法,實(shí)現(xiàn)了SAVI DHCPv6的仿真系統(tǒng),并使用該系統(tǒng)進(jìn)行不同驗(yàn)證方法的對(duì)比實(shí)驗(yàn)。結(jié)果表明,提出的兩種改進(jìn)方法比順序查找方法具有更優(yōu)的時(shí)間性能。
[Abstract]:Due to the lack of source address authentication mechanism, many malicious attacks that rely on IP spoofing occur frequently. In the DHCPv6 scenario, the source address verification to prevent IP spoofing improves the (SAVI) work. At present, it is driven by the Internet Engineering Task Force (IETF), but the exact method of source address verification has not been given yet. For this reason, two verification methods are proposed: the improved multi-bit Trie tree algorithm and the improved hash lookup algorithm. The simulation system of SAVI DHCPv6 is implemented, and the comparison experiments of different verification methods are carried out with the system. The results show that the two improved methods have better time performance than the sequential lookup method.
【作者單位】： 中國(guó)科學(xué)院大學(xué);中國(guó)科學(xué)院計(jì)算機(jī)網(wǎng)絡(luò)信息中心;北龍中網(wǎng)(北京)科技有限責(zé)任公司;
【基金】：國(guó)家自然科學(xué)基金面上項(xiàng)目(61375039) 中科院網(wǎng)絡(luò)中心一三五重點(diǎn)項(xiàng)目(CNIC_PY_1402)
【分類號(hào)】：TP393.08
，

本文編號(hào)：2332129