系统工程理论与实践
繫統工程理論與實踐
계통공정이론여실천
Systems Engineering—Theory & Practice
2008年
11期
135~141
,共null页
对等覆盖网络 拓扑结构 幂律分布 蓄意攻击 分散式目标免疫 成本 效率
對等覆蓋網絡 拓撲結構 冪律分佈 蓄意攻擊 分散式目標免疫 成本 效率
대등복개망락 탁복결구 멱률분포 축의공격 분산식목표면역 성본 효솔
peer-to-peer overlay networks; topology; power-law; intentional attacks; decentralized targeted immunization; cost; efficiency
P2P网络的节点度近似服从幂律分布的无标度特性导致了这类网络对随机故障的鲁棒性和对蓄意攻击的脆弱性．为提高其抵抗蓄意攻击的能力，提出了一种经济、高效的分散式目标免疫策略，针对（1）具有最高连接度的节点、（2）具有最高可用性的节点和（3）与具有最高负载的链路直接相连的节点这三类目标实施免疫，设计了基于，NoN-indexing机制的熟人免疫方法，能够仅利用网络拓扑局部知识和仅免疫少量关键节点，即可大幅度提高P2P网络的抗蓄意攻击能力．仿真实验结果验证了该分散式免疫策略的经济性和高效性．
P2P網絡的節點度近似服從冪律分佈的無標度特性導緻瞭這類網絡對隨機故障的魯棒性和對蓄意攻擊的脆弱性．為提高其牴抗蓄意攻擊的能力，提齣瞭一種經濟、高效的分散式目標免疫策略，針對（1）具有最高連接度的節點、（2）具有最高可用性的節點和（3）與具有最高負載的鏈路直接相連的節點這三類目標實施免疫，設計瞭基于，NoN-indexing機製的熟人免疫方法，能夠僅利用網絡拓撲跼部知識和僅免疫少量關鍵節點，即可大幅度提高P2P網絡的抗蓄意攻擊能力．倣真實驗結果驗證瞭該分散式免疫策略的經濟性和高效性．
P2P망락적절점도근사복종멱률분포적무표도특성도치료저류망락대수궤고장적로봉성화대축의공격적취약성．위제고기저항축의공격적능력，제출료일충경제、고효적분산식목표면역책략，침대（1）구유최고련접도적절점、（2）구유최고가용성적절점화（3）여구유최고부재적련로직접상련적절점저삼류목표실시면역，설계료기우，NoN-indexing궤제적숙인면역방법，능구부이용망락탁복국부지식화부면역소량관건절점，즉가대폭도제고P2P망락적항축의공격능력．방진실험결과험증료해분산식면역책략적경제성화고효성．
The power-law node degree distributions of peer-to-poer overlay networks make them extremely robust to random failures whereas highly vulnerable under intentional targeted attacks. To enhance attack survivability of these networks, a novel immunization strategy, coupled with a NoN-indexing based acquaintances selection method, is proposed to conduct completely decentralized immunizations, by utilizing only domain heuristics locally, and by curing only those right nodes with （ 1 ） highest connectivity, （2） highest availability and （3） highest link-load. Extensive simulation results show that the proposed immunization strategy Outperforms its competitors, producing an arresting increase of the network attack tolerance,at a lower price of eliminating computer viruses or malicious attacks.
