發(fā)布時間：2018-11-14 19:50

【摘要】：由于現(xiàn)今的網(wǎng)絡(luò)缺乏源地址驗證機制,導致多種依靠IP欺騙的惡意攻擊時有發(fā)生。在DHCPv6場景中防止IP欺騙的源地址驗證改進(SAVI)工作,目前正由互聯(lián)網(wǎng)工程任務(wù)組(IETF)驅(qū)動,但尚未給出確切的源地址驗證方法。為此,提出兩個驗證方法:改進的多比特Trie樹算法和改進的哈希查找算法,實現(xiàn)了SAVI DHCPv6的仿真系統(tǒng),并使用該系統(tǒng)進行不同驗證方法的對比實驗。結(jié)果表明,提出的兩種改進方法比順序查找方法具有更優(yōu)的時間性能。
[Abstract]:Due to the lack of source address authentication mechanism, many malicious attacks that rely on IP spoofing occur frequently. In the DHCPv6 scenario, the source address verification to prevent IP spoofing improves the (SAVI) work. At present, it is driven by the Internet Engineering Task Force (IETF), but the exact method of source address verification has not been given yet. For this reason, two verification methods are proposed: the improved multi-bit Trie tree algorithm and the improved hash lookup algorithm. The simulation system of SAVI DHCPv6 is implemented, and the comparison experiments of different verification methods are carried out with the system. The results show that the two improved methods have better time performance than the sequential lookup method.
【作者單位】： 中國科學院大學;中國科學院計算機網(wǎng)絡(luò)信息中心;北龍中網(wǎng)(北京)科技有限責任公司;
【基金】：國家自然科學基金面上項目(61375039) 中科院網(wǎng)絡(luò)中心一三五重點項目(CNIC_PY_1402)
【分類號】：TP393.08
，

本文編號：2332129