完整後設資料紀錄
DC 欄位語言
dc.contributor.author陳志偉en_US
dc.contributor.author謝續平en_US
dc.date.accessioned2014-12-12T01:57:28Z-
dc.date.available2014-12-12T01:57:28Z-
dc.date.issued2003en_US
dc.identifier.urihttp://140.113.39.130/cdrfb3/record/nctu/#GT009117531en_US
dc.identifier.urihttp://hdl.handle.net/11536/49713-
dc.description.abstract在TCP裡,錯誤的逾期會造成相當大的傷害,而已經存在有兩種類的方法來減輕這個問題,我們稱他們為保守措施與積進措施,在保守措施裡有用到一個保守重送逾期值(RTO, Retransmission Timeout) minRTO,當根據RTT (Round Trip Time) 所估算出來的RTO小於 minRTO 時,RTO就會被設為minRTO,這樣的做法會讓RTO變成是可預測的,進而可能被攻擊者利用。TCP低速阻斷服務攻擊(Low-Rate TCP Targeted Denial-of-Service Attack) 就是屬於這種攻擊,在本論文裡,我們提出了四種方法來處裡這個問題,在不改變保守RTO的前提下,我們讓RTO變得不可預測,我們也做了分析和實驗來顯示我們的方法在遭預這種攻擊時可以存活下來。在我們的方法裡,當遭遇攻擊時能達到的平均流量會比改善前多出許多,另一方面,在平常的狀況下,我們的方法幾會不會影響TCP的表現。我們也分析了TCP低速阻斷服務攻擊是如何影響TCP的運作即使在攻擊沒有成功時。zh_TW
dc.description.abstractSpurious timeout is very harmful to TCP. Two kinds of approaches were proposed to mitigate this problem, conservative approach and aggressive approach. In conservative approach, a conservative RTO (Retransmission Timeout), minRTO, is used. When RTO estimate form RTT (Round Trip Time) is less than minRTO, it is set to minRTO. This makes RTO become predictable and may be exploited by attackers. Low-Rate TCP Targeted Denial of Service is such kind of attack. In this thesis, we propose four schemes to deal with this problem. We make RTO unpredictable and keep conservative property. Analysis and experiment will be made to show that our schemes survive the attack. In our scheme, much better throughput is gained under attack. Besides, in usual condition, our schemes affect TCP performance only slightly. We will also analysis how Low-Rate TCP Targeted Denial of Service damages TCP operation inherently and how to gain the best throughput even if it is not achieved successfully.en_US
dc.language.isoen_USen_US
dc.subject低速阻斷服務zh_TW
dc.subject逾期zh_TW
dc.subjectLow-Rate DoSen_US
dc.subjecttimeouten_US
dc.titleTCP低速阻斷服務攻擊之預防zh_TW
dc.titlePreventing Low-Rate TCP Targeted Denial-of-Service Attacken_US
dc.typeThesisen_US
dc.contributor.department資訊科學與工程研究所zh_TW
顯示於類別:畢業論文


文件中的檔案:

  1. 753101.pdf

若為 zip 檔案,請下載檔案解壓縮後,用瀏覽器開啟資料夾中的 index.html 瀏覽全文。