无线LAN中基于MAC层的降低质量(RoQ)攻击防御体系结构
A MAC Layer Based Defense Architecture for Reduction of Quality (RoQ) Attacks in Wireless LAN
摘要:
最近,DDoS攻击的一种替代方案被称为Shrew攻击或降低质量(RoQ),这是非常难以检测的。RoQ攻击可以利用源和目的IP地址欺骗,并且它们没有明显的周期性,并且可能无法精确地过滤攻击数据包。在本文中,我们提出了在无线局域网中,包括检测和响应阶段的RoQ攻击的MAC层为基础的防御体系结构设计。通过检查来自MAC层的RTS CTS分组来检测攻击者,并且阻止或拒绝相应的攻击流。仿真结果表明,该方法通过增加接收带宽和减少合法用户的丢包率,降低了攻击吞吐量。
英文摘要:
Recently an alternative of DDoS attacks called shrew attacks or Reduction of Quality (RoQ) has been identified which is very much difficult to detect. The RoQ attacks can use source and destination IP address spoofing, and they do not have distinct periodicity, and may not filter the attack packets precisely. In this paper, we propose to design the MAC layer based defense architecture for RoQ attacks in Wireless LAN which includes the detection and response stages. The attackers are detected by checking the RTS CTS packets from the MAC layer and the corresponding attack flows are blocked or rejected. By our simulation results, we show that our proposed technique achieves reduces the attack throughput there by increasing the received bandwidth and reducing the packet loss of legitimate users.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。