摘要
包采样应用于检测网络流量计费、入侵检测、端到端链路质量分析,包采样机制必须具有避免敌意主机攻击与逃避网络计费数据包采样的能力.主要分析IETF包采样工作组建议的被动包采样预防机制及其存在的安全漏洞,详细阐述基于PSAMP模型的非协同包采样与协同包采样的固定采样周期、历史信息使用、探知采样选择范围的安全性.提出伪随机函数协同包采样形式化定义的规则设置与安全条件,以避免包采样泄漏信息给敌意主机,从而提高基于PSAMP包采样的安全性.
Packet sampling Can be applied to the detection of network traffic accounting, intrusion detection, and end to end link quality analysis. The sampling system must have the ability to avoid the hostile attack and evade the host network accounting packet sampling This paper analyzes the Passive Packet sampling mechanism recommended by the EETF pack sampling working group and its security valnerabilities;then it describes the fixed sampling period, the usage of historical informention and the salty of sampling selection of PSAMP sampling wrder the case of non-cooperative and collaborative paehet samplings. Finany,it puts out the set of rules and sffty conditions made by. pseudo-random funtion of cooperalive pachet sampling,to avoid leaking information to hostile host and erhance the seurity of it.
出处
《西华师范大学学报（自然科学版）》
2011年第3期246-251,共6页
Journal of China West Normal University(Natural Sciences)
关键词
协同
包采样
伪随机函数
选择范围
cooperative
packet sampling
pseudorandom function
selection range
