Software defined opportunity network DDoS defense method based on block chain

Abstract

The invention discloses a software defined opportunity network DDoS defense method based on a block chain. Firstly, the characteristic that the SDN can perform logic centralized management and controlon a control layer is utilized; the network state is dynamically monitored in real time; then, the possibility of existence of a DDoS amplification attack is analyzed by analyzing the traffic characteristics obtained by monitoring, an attacker address is determined according to a traceability algorithm, and finally, a public accessible attacker blacklist is maintained by using a block chain architecture to assist an application layer in malicious traffic filtering so as to realize defense of the DDoS attack. According to the method, the attack source tracking accuracy is improved, the storage of the attack source blacklist address is realized in combination with the block chain architecture, and the attack source storage architecture based on the distributed account book technology can effectively prevent the data from being tampered or damaged while maintaining the data reliability. The whole network can perform filtering in a data packet receiving stage by inquiring a blacklist address, so that the DDoS attack is prevented from the source.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a blockchain-based software-defined opportunistic network DDoS defense method. Background technique [0002] DDoS (distributed denial of service attack) means that the attacker manipulates a large number of zombie hosts through the network to jointly launch an attack on one or a small number of hosts, and paralyzes the attacker by converging service or resource requests that are several times that of a single host. Progress, the memory storage capacity or CPU computing power of general hosts are constantly improving, and the bandwidth of advanced servers has even reached the gigabit level, which increases the difficulty of effective implementation and actual effects of traditional DoS attacks. Compared with DDoS Traditional DoS attacks make full use of the connectivity characteristics of the network. The attacker invades thousands of foreign hosts through system vulnerabilities...

AI Technical Summary

Problems solved by technology

[0007] In view of this, the present invention provides a blockchain-based software-defined opportunistic network DDoS defense method to solve or at least partially solve the technical problem that software-defined opportunistic networks are less effective in defending against DDOS attacks in the prior art

Images