Abstract

© . . (convoluted multiaddress

-

$ #+ , "# +

TCP/IP, , » (DoS), IP

+ #+

XVII DAMDID/RCDL’2015 «

! " ! « . / . *

" +

. * ( " [ 3 ]). * # $ », #! 13-16 ( " / + + . ' » + , , #+ " $ : "

# "! " . % [ 6 ], $

(semantic) + #+ (flood, brute-force). * - # , " #+

. % " [ 4 ] [ 1 ].

$ $ " # . 0 " # " DDoS ! ! $ , $

" [ 9 ]); "! # $

#: , $

" . & " , +"#

, IP

, DDoS ,

, IP.

: m(n,R), +

, ,

+ . !" ", ! IPDNS "+

5 # " , $ $

IP-). *#

. " # "! ).

, ,, R - $ , $$n – , # ! " , " $ »

, . * " # , " (

, « DDoS, ( &" "[ 7 ](

, . & 1 1 / . ""

x $ . 1 ""# & " !

# ,.

" , t: !(NAT).!

$ . 0 # . , , " . " rout(n) m(n, R) i $ " x . ) m(n,R) out( j, y) a(t,i, j)

,j: #

R $ . 1.

, # y i . – , #+ " , # " # - # $ $$ # $ $ " #+ !

! f(j): # $ $ " + " ", K ! . $ 4 , # 4 ' #+ ' , ( /

$ $ +# $ !

: |Tm| "

– " " , " : $ +"# .M..1 " , ! , , -I"P ! ! -#,

+ ! , $ « . 4"# IP Fast Hopping.

. 2. , #+ » (IPR) ,( K IPA). 6

IP "

IP , DNS " . + IPr = {IP1, IP2, …, IPn} ( +

$ + # "

#+" # IP ) R. &

# + + + #+ ! # « ).+& ( IP0, ,

IP ! $ IPr , : GNU/Linux.

*

, Linux ,

( $ "

GNU/Linux ( " .

- ) – Netfilter, # + +

#

, + + + – 4

: (PREROUTING), "

+ (FORWARD), (OUTPUT) "

POSTROUTING. ,

# ! netfilter PREROUTING

#+ "

IP + + , IP 4 +

, , * + . * # ( #+ ).

( $ "

, , ). , ).

" " # "

*

," * pp. 24-31, 2014.

, "0 +

IP

and

The method ensuring increased DDoS and traffic eavesdropping resistance of data transmission sessions is demonstrated in this article. The technique is based on the suggested model of convoluted multiaddress networks. This approach provides a way to isolate network nodes from malicious traffic by hiding of physical node address from all unauthorized clients. Under the suggested method, server’s IP address is not a unique identification, but a pseudorandom value which is calculated dynamically for each network packet from each traffic stream initiated by legitimate clients. In the result, malefactor is unable to acquire access to the server because the current network address and schedule of its change is unavailable. The model of traffic transmission in such networks and example of initial implementation is demonstrated in this paper.

References

[1] Patel Ankita and Fenil Khatiwala , "Survey on DDoS Attack Detection and Prevention in Cloud," International Journal of Engineering Technology, Management and Applied Sciences , vol. 3 , no. 2 , pp. 43 - 47 , 2015 .

[2] S. Antonatos , P. Akritidis , E. P. Markatos , and K. G. Anagnostakis , "Defending Against Hitlist Worms Using Network Address Space Randomization," in Proceedings of the 2005 ACM Workshop on Rapid Malcode , Fairfax, VA , USA, 2005 , pp. 30 - 40 .

[3] Rajra Blessy and A J Deepa , "A Survey on Network Security Attacks and Prevention Mechanism," Journal of Current Computer Science and Technology , vol. 5 , no. 2 , pp. 1 - 5 , 2015 .

[4] B. B. Gupta , R. C. Joshi , and Manoj Misra , "Distributed Denial of Service Prevention Techniques," International Journal of Computer and Electrical Engineering , vol. 2 , no. 2 , pp. 268 - 276 , 2010 .

[5] Vladimir Krylov and Kirill Kravtsov , "DDoS attack and interception resistance IP fast hopping based protocol," in 23rd International Conference on Software Engineering and Data Engineering , SEDE 2014 , New Orleans, 2014 , pp. 43 - 48 .

[6] Jelena Mirkovic and Peter Reiher , "A taxonomy of DDoS attack and DDoS defense mechanisms," ACM SIGCOMM Computer Communication Review, no . Volume 34 Issue 2 , pp. 39 - 53 , 2004 .

[7] Prateek Mittal , Dongho Kim, Yih-Chun Hu , and Matthew Caesar , "Mirage: Towards Deployable DDoS Defense for Web Applications," 2012 .

[8] K. Munivara Prasad , A. Rama Mohan Reddy , and K. Venugopal Rao , "DoS and DDoS Attacks: Defense, Detection and Traceback Mechanisms - A Survey , " Global Journal of Computer Science and Technology , vol. 14 , no. 7-E, pp. 15 - 32 , 2014 .

[9] Saman Taghavi Zargar , James Joshi, and David Tipper, "A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks," Communications Surveys & Tutorials , IEEE, vol. 15 , no. 4 , pp. 2046 - 2069 , 2013 .