基于Tapestry系統(tǒng)的DDoS攻擊及其預(yù)防策略

由于結(jié)構(gòu)松散，節(jié)點可以動態(tài)地加入和退出，安全性問題已經(jīng)成為P2P網(wǎng)絡(luò)所面臨的主要挑戰(zhàn)之一。Tapestry系統(tǒng)中攻擊者可以利用系統(tǒng)的軟狀態(tài)機制，污染資源定位指針列表，控制主控端，發(fā)起DDoS攻擊?；谏矸?a target='_blank' class='arckwlink_none'>認證的策略可以保護資源定位指針列表不受攻擊者的污染，從而預(yù)防了DDoS攻擊的發(fā)生。
關(guān)鍵詞：Tapestry；分布式拒絕服務(wù)攻擊；軟狀態(tài)
Abstract：Security issues have been one of the chief challenges in P2P networks because of their loose structure and the fact that nodes can join and leave the system dynamically. In Tapestry system the attacker can pollute the object location list and control the handlers to create DDoS attack. A strategy based on identity authentication has been proposed to protect the object location list and to defend the DDoS attack.
Key words: Tapestry；Distributed Denial of Service attack；soft-state