Method for collaboratively resisting overlay layer DDoS attack in P2P network

Abstract

The invention relates to a method for collaboratively resisting overlay layer DDoS attack in a P2P network. The existing method has poor resistance. In the method of the invention, firstly whether the quantity of zero-purpose messages received by nodes in the P2P network within a detection period excesses the attack tolerance of the nodes is detected; secondly, the nodes receiving collaborative resisting messages are allowed to read the messages and process the messages collaboratively; and if the nodes in the i layer does response within the time of 2*delta t and the attack from the nodes of the i- layer is detected by the nodes of the (i-1) layer, the nodes of the (i-1) layer disconnects with the nodes of the i layer or does not provide service for the nodes of the i layer. The node of an attack source is approached through the processes, and the nodes collaboratively detect and inhabit attack messages to ensure that the quantity of the zero-purpose messages received by the nodes of the 0 layer does not excess the attack tolerance theta. In the invention, back tracking processes are utilized stage by stage to cause the nodes close to the attack source to detect attack and inhabit the attack source, thereby reducing the quantity of influenced nodes.

Description

technical field [0001] The invention belongs to the field of P2P network security, and in particular relates to a method for cooperatively resisting overlay layer DDoS attacks in a P2P network. Background technique [0002] DDoS (Distributed Denial of Service, Distributed Denial of Service) attack is developed from DoS attack. This attack uses compromised computers on the network as puppet machines to launch intensive "denial of service" to a specific target computer. Attacks exhaust the network resources and system resources of the target computer, making it impossible to provide services to normal requesting users. DDoS attacks only need to consume less resources of the attacker, but will have a serious impact on the attacked and take a long time to recover. [0003] Due to its decentralized and distributed characteristics, P2P networks have a natural ability to resist DDoS attacks, but attackers will also use the characteristics of autonomy and large number of nodes in P...

AI Technical Summary

Problems solved by technology

If a large number of nodes send such messages to the same target node, the TCP connection resources of the target node will be exhausted and cannot respond to other connection requests, thus causing a DDoS attack

[0008] (3) Flood attack based on query message

However, if the attacker cooperates with other attack methods to launch a flood attack based on query messages, under the existing technology, the nodes in the P2P network do not cooperate with other nodes, and only rely on the nodes themselves to resist or exit the network to avoid the attack. incapable of effective resistance

Images