LDDoS simulation method based on light-weight virtualization

Abstract

The invention provides an LDDoS simulation method based on light-weight virtualization. The LDDoS simulation method based on light-weight virtualization relates to the field of the network simulationand the network security. The target network topology automatic deployment and the protocol configuration can be quickly and flexibly performed by using the method, and the method can be used for attack-defense strategy research and effect evaluation of the large-scale LDDoS. The method comprises the following steps: manufacturing a light-weight virtualization routing mirror image; manufacturing an LDDoS attack mirror image; constructing a network topology based on the light-weight virtualization; setting attack parameters and performing coordinated attack; collecting and evaluating link datain real time; and visually displaying the attack effect data. Through the simulation provided by the invention, the large-scale and high-vivid simulation environment can be provided by using less resource; the method can be used for the LDDoS attack-defense strategy research, and can be further used for the evaluation of other network security events.

Description

technical field [0001] The invention relates to the field of network simulation and network security, and relates to a lightweight virtualization-based LDDoS (low-rate distributed denial-of-service attack) simulation method. Background technique [0002] With the increasing scale of the Internet network, various illegal security incidents against the Internet network emerge in an endless stream, and LDDoS is becoming one of the major threats to Internet security. DoS (Denial of Service attack) first appeared in August 1999. The attack principle is that the attacker sends malicious traffic to the attack target, consumes the target's network bandwidth and computing resources, and prevents the target from providing services to legitimate users. DDoS (Distributed Denial of Service Attack) is further developed on the basis of DoS. The attacker controls a large number of puppet machines to carry out DoS attacks on the target. The attack traffic can be concentrated, and the attacke...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to solve the problems of low fidelity, high resource requirements, and complex deployment encountered in traditional network simulation. At the same time, it is specially aimed at the research and effect evaluation of LDDoS attack and defense strategies, and proposes a simulation scheme using Docker containers as nodes, which can realize the target network Topology automatic deployment and BGP protocol automatic configuration, and provide easy-to-use system configuration interface and data visualization window

Images