Proceedings of the Korea Information Processing Society Conference (한국정보처리학회:학술대회논문집)
- 2003.11b
- /
- Pages.911-914
- /
- 2003
- /
- 2005-0011(pISSN)
- /
- 2671-7298(eISSN)
D-DoS Attack Prevention Using Improved 'Approximated VC' in AS Network Topology
향상된 VC 근사기법을 이용한 AS망에서의 D-DoS 공격의 효율적 차단
- Kim, Han-Soo (Dept of Electronic Engineering, Sogang Univ.) ;
- Lee, Hoon-Jae (Dept of Electronic Engineering, Sogang Univ.) ;
-
Jang, Ju-Wook
(Dept of Electronic Engineering, Sogang Univ.)
- Published : 2003.11.14
Abstract
The prevention of D-Dos Attack requires to install filters at As border routers. This follows that finding minimum number of filters - VC(Vertex Cover), which is NP-complete problem. So, We propose improved 'Approximate VC' which is more efficient to real AS topology using topology property. Simulation shows that our algorithm, improved 'Approximated VC' enables us to reduce 25% VC nodes in comparison with 'Approximated VC'.
D-DoS 공격을 차단하기 위해서는 AS 경계 라우터에 필터 설치가 필요하며, 이는 최소한의 라우터에 필터를 설치하기 위해 VC(Vertex Cover)를 찾아내는 NP-complete 문제로 귀결된다. 따라서 실제 AS 망구성의 특성을 이용해 이에 적합한 VC 근사기법을 찾아내는 알고리즘을 제안한다. 실험 결과, 제안된 알고리즘(Improved 'Approximated VC')은 기존의 'Approximated VC'에 의해 필요한 노드수의 26%를 줄였다.
Keywords