CN108540461B - 一种基于滑动时间窗口的IPv6地址跳变主动防御方法 - Google Patents
一种基于滑动时间窗口的IPv6地址跳变主动防御方法 Download PDFInfo
- Publication number
- CN108540461B CN108540461B CN201810254708.8A CN201810254708A CN108540461B CN 108540461 B CN108540461 B CN 108540461B CN 201810254708 A CN201810254708 A CN 201810254708A CN 108540461 B CN108540461 B CN 108540461B
- Authority
- CN
- China
- Prior art keywords
- communication
- time window
- hopping
- ipv6
- address
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 42
- 230000007123 defense Effects 0.000 title claims abstract description 18
- 230000006854 communication Effects 0.000 claims abstract description 95
- 238000004891 communication Methods 0.000 claims abstract description 79
- 239000003999 initiator Substances 0.000 claims abstract description 20
- 230000008569 process Effects 0.000 claims abstract description 16
- 230000005540 biological transmission Effects 0.000 claims description 7
- 238000012790 confirmation Methods 0.000 claims description 5
- 230000008859 change Effects 0.000 claims description 4
- 230000009191 jumping Effects 0.000 claims description 3
- 238000001514 detection method Methods 0.000 abstract description 2
- 230000003044 adaptive effect Effects 0.000 description 5
- 238000005516 engineering process Methods 0.000 description 3
- 230000007246 mechanism Effects 0.000 description 3
- 230000007704 transition Effects 0.000 description 3
- 238000010586 diagram Methods 0.000 description 2
- 239000000284 extract Substances 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012545 processing Methods 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000008092 positive effect Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
- 238000013519 translation Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1458—Denial of Service
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/27—Evaluation or update of window size, e.g. using information derived from acknowledged [ACK] packets
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/25—Mapping addresses of the same type
- H04L61/2503—Translation of Internet protocol [IP] addresses
- H04L61/2557—Translation policies or rules
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
Claims (3)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810254708.8A CN108540461B (zh) | 2018-03-26 | 2018-03-26 | 一种基于滑动时间窗口的IPv6地址跳变主动防御方法 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810254708.8A CN108540461B (zh) | 2018-03-26 | 2018-03-26 | 一种基于滑动时间窗口的IPv6地址跳变主动防御方法 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN108540461A CN108540461A (zh) | 2018-09-14 |
CN108540461B true CN108540461B (zh) | 2020-09-11 |
Family
ID=63484855
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201810254708.8A Active CN108540461B (zh) | 2018-03-26 | 2018-03-26 | 一种基于滑动时间窗口的IPv6地址跳变主动防御方法 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN108540461B (zh) |
Families Citing this family (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113595769B (zh) * | 2021-07-09 | 2022-06-07 | 武汉大学 | 一种跳变网络多节点网络延迟时间窗计算方法 |
CN114024623B (zh) * | 2021-11-03 | 2023-06-30 | 中南大学 | 一种主动防御方法 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101267312A (zh) * | 2008-04-30 | 2008-09-17 | 中兴通讯股份有限公司 | 一种网络中防止地址冲突检测欺骗的方法 |
CN101931627A (zh) * | 2010-08-26 | 2010-12-29 | 福建星网锐捷网络有限公司 | 安全检测方法、装置和网络侧设备 |
CN101945143A (zh) * | 2010-09-16 | 2011-01-12 | 中兴通讯股份有限公司 | 一种在混合组网下防止报文地址欺骗的方法及装置 |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10243733B2 (en) * | 2016-03-17 | 2019-03-26 | Virginia Tech Intellectual Properties, Inc. | Process and system for establishing a moving target connection for secure communications in client/server systems |
-
2018
- 2018-03-26 CN CN201810254708.8A patent/CN108540461B/zh active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101267312A (zh) * | 2008-04-30 | 2008-09-17 | 中兴通讯股份有限公司 | 一种网络中防止地址冲突检测欺骗的方法 |
CN101931627A (zh) * | 2010-08-26 | 2010-12-29 | 福建星网锐捷网络有限公司 | 安全检测方法、装置和网络侧设备 |
CN101945143A (zh) * | 2010-09-16 | 2011-01-12 | 中兴通讯股份有限公司 | 一种在混合组网下防止报文地址欺骗的方法及装置 |
Non-Patent Citations (2)
Title |
---|
一种基于多穴跳变的IPv6主动防御模型;刘慧生 等;《电子与信息学报》;20120731;第34卷(第7期);第1715-1720页 * |
基于滑动地址窗口的IPv6动态地址隧道模型;马子川 等;《电信科学》;20151031;第1-3节 * |
Also Published As
Publication number | Publication date |
---|---|
CN108540461A (zh) | 2018-09-14 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
Glissa et al. | 6LowPSec: An end-to-end security protocol for 6LoWPAN | |
US7584352B2 (en) | Protection against denial of service attacks | |
WO2011028565A4 (en) | Galois/counter mode encryption in a wireless network | |
Thornburgh | Adobe's Secure Real-Time Media Flow Protocol | |
Mittal et al. | Mirage: Towards deployable DDoS defense for Web applications | |
CN108540461B (zh) | 一种基于滑动时间窗口的IPv6地址跳变主动防御方法 | |
Díez et al. | Security for multipath TCP: a constructive approach | |
Chakraborty et al. | 6LoWPAN security: classification, analysis and open research issues | |
CN102427452B (zh) | 同步报文发送方法、装置和网络设备 | |
Hari et al. | Dependability modeling and analysis of random port hopping | |
Wendzel et al. | Design and implementation of an active warden addressing protocol switching covert channels | |
CN111447588A (zh) | 一种基于端信息跳变的车联网安全通信方法、系统及应用 | |
Zheng et al. | Application-based TCP hijacking | |
Shen et al. | A two-level source address spoofing prevention based on automatic signature and verification mechanism | |
Liu et al. | AEH-MTD: Adaptive moving target defense scheme for SDN | |
Biagioni | Preventing UDP flooding amplification attacks with weak authentication | |
Chen et al. | TRACK: A novel approach for defending against distributed denial-of-service attacks | |
Raoof et al. | The effect of buffer management strategies on 6LoWPAN's response to buffer reservation attacks | |
Kao et al. | Real-time anonymous routing for mobile ad hoc networks | |
CN115426116B (zh) | 一种基于动态密钥的加密哈希跳变方法 | |
Jing et al. | Recipient anonymity: an improved crowds protocol based on key sharing | |
Zhijun et al. | Research on time synchronization and flow aggregation in LDDoS attack based on cross-correlation | |
Wu et al. | Cross-correlation based synchronization mechanism of lddos attacks | |
Bernardo et al. | Network security considerations for a new generation protocol UDT | |
Liu et al. | Research on Active Defense Model for IPV6 Address Jump |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant | ||
TR01 | Transfer of patent right |
Effective date of registration: 20230904 Address after: 518102 Mingyou Procurement Center A808, Baoyuan Road, Xixiang Street, Bao'an District, Shenzhen City, Guangdong Province Patentee after: Shenzhen Lingwuerlu Technology Co.,Ltd. Address before: 451191 No. 1 Xianghe Road, Longhu Town, Zhengzhou City, Henan Province Patentee before: HENAN INSTITUTE OF ENGINEERING |
|
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20231222 Address after: 9-6, No. 38, Building 7, East Zone, Ningbo New Materials Innovation Center, High tech Zone, Ningbo City, Zhejiang Province, 315100 Patentee after: Ningbo Zhongke Intelligent Computing Technology Co.,Ltd. Address before: 518102 Mingyou Procurement Center A808, Baoyuan Road, Xixiang Street, Bao'an District, Shenzhen City, Guangdong Province Patentee before: Shenzhen Lingwuerlu Technology Co.,Ltd. |
|
TR01 | Transfer of patent right |