CAJ | 학술논문

研究传统的客户端难题方案,之后提出一种自适应客户端难题方案.该方案采用一种轻量级的协议交互方式来获取客户端和服务器双方的实时状态信息,并据此自适应地调整客户端难题的难度.为了评估该方案的适用性,结合传统和自适应两种客户端难题方案,在对等(P2P)网络中提出了一种抵御DoS攻击的自适应安全框架.理论分析和实验结果表明,甚至在高度恶意的网络环境中,自适应客户端难题方案都可以在不明显影响合法客户端性能的前提下有效地抵御各种DoS攻击.
연구전통적객호단난제방안,지후제출일충자괄응객호단난제방안.해방안채용일충경량급적협의교호방식래획취객호단화복무기쌍방적실시상태신식,병거차자괄응지조정객호단난제적난도.위료평고해방안적괄용성,결합전통화자괄응량충객호단난제방안,재대등(P2P)망락중제출료일충저어DoS공격적자괄응안전광가.이론분석화실험결과표명,심지재고도악의적망락배경중,자괄응객호단난제방안도가이재불명현영향합법객호단성능적전제하유효지저어각충DoS공격.
This paper studies the traditional client puzzle scheme and proposes an adaptive scheme which performs a lightweight client-server interaction to flexibly adjust the puzzle difficulty according to the real-time statuses of both client and server. To evaluate the applicability, the authors combine the two schemes and develop an adaptive DoS-resistant security framework for Peer-to-Peer networks. The theoretical analyses and experimental results show that the adaptive client puzzle scheme can effectively defend against various DoS attacks without significantly influencing legitimate clients' experiences even in a highly malicious environment.