針對EDoS攻擊偵測及防禦之研究;A Study of Detection and Defense for EDoS Attack

NCU Institutional Repository > 資訊電機學院 > 資訊工程研究所 > 博碩士論文 > Item 987654321/86789

jsp.display-item.identifier=請使用永久網址來引用或連結此文件: http://ir.lib.ncu.edu.tw/handle/987654321/86789

题名:	針對EDoS攻擊偵測及防禦之研究;A Study of Detection and Defense for EDoS Attack
作者:	賴映岑;Lai, Ying-Cen
贡献者:	資訊工程學系
关键词:	EDoS攻擊;Yo-Yo攻擊;流量分析;K-means clustering;Dynamic Time Warping;EDoS attack;Yo-Yo attack;Traffic analysis;K-means clustering;Dynamic Time Warping
日期:	2021-09-02
上传时间:	2021-12-07 13:13:10 (UTC+8)
出版者:	國立中央大學
摘要:	在雲端運算蓬勃發展下，彈性雲之營運方式被廣泛使用，透過根據用戶服務級別協議（SLA）提供 QoS，使服務更能按需求部署及彈性擴展。然而此種營運機制可能會受到針對雲服務之 Economic Denial of Sustainability（EDoS）攻擊，表面上對服務提出合法請求，利用服務自動擴展機制，造成系統持續擴展資源，讓用戶需要支付龐大的資源使用費。而本論文提出一個機制，利用基於 Dynamic Time Warping 的 K-means 分群演算法對用戶流量進行分群，並分析服務資源使用率和用戶流量之間的時間分布，來區分合法用戶及惡意用戶，並限制惡意用戶存取服務，來達到偵測 Yo-Yo 攻擊以及防禦之效果。;As development of cloud computing grows rapidly, the operation with Elastic Cloud is widely used. By providing QoS according to the user service level agreement (SLA), the service can be deployed and expanded flexibly on demand. However, this kind of operation may suffer Economic Denial of Sustainability (EDoS) attacks against cloud services. On the surface, legal requests are sent to the service, cause the system to continue to expand resources with auto-scaling mechanism. Let users need to pay for a huge usage fee. This paper proposes a mechanism that uses the K-means clustering algorithm based on Dynamic Time Warping to cluster users’ traffic, and analyzes the time distribution between system resource usage and user traffic to distinguish legitimate users from malicious users. Then restrict malicious users to access the Service. Keep the service from the threat of Yo-Yo attack.
显示于类别:	[資訊工程研究所] 博碩士論文

文件中的档案:

档案	描述	大小	格式	浏览次数
index.html		0Kb	HTML	97	检视/开启

在NCUIR中所有的数据项都受到原著作权保护.

社群 sharing

数据加载中.....