ImageVerifierCode 换一换
格式:PPT , 页数:23 ,大小:608.50KB ,
资源ID:376547      下载积分:2000 积分
快捷下载
登录下载
邮箱/手机:
温馨提示:
如需开发票,请勿充值!快捷下载时,用户名和密码都是您填写的邮箱或者手机号,方便查询和重复下载(系统自动生成)。
如填写123,账号就是123,密码也是123。
特别说明:
请自助下载,系统不会自动发送文件的哦; 如果您已付费,想二次下载,请登录后访问:我的下载记录
支付方式: 支付宝扫码支付 微信扫码支付   
注意:如需开发票,请勿充值!
验证码:   换一换

加入VIP,免费下载
 

温馨提示:由于个人手机设置不同,如果发现不能下载,请复制以下地址【http://www.mydoc123.com/d-376547.html】到电脑端继续下载(重复下载不扣费)。

已注册用户请登录:
账号:
密码:
验证码:   换一换
  忘记密码?
三方登录: 微信登录  

下载须知

1: 本站所有资源如无特殊说明,都需要本地电脑安装OFFICE2007和PDF阅读器。
2: 试题试卷类文档,如果标题没有明确说明有答案则都视为没有答案,请知晓。
3: 文件的所有权益归上传用户所有。
4. 未经权益所有人同意不得将文件中的内容挪作商业或盈利用途。
5. 本站仅提供交流平台,并不能对任何下载内容负责。
6. 下载文件中如有侵权或不适当内容,请与我们联系,我们立即纠正。
7. 本站不保证下载资源的准确性、安全性和完整性, 同时也不承担用户因使用这些下载资源对自己和他人造成任何形式的伤害或损失。

版权提示 | 免责声明

本文(Internet Cache Pollution Attacks and Countermeasures.ppt)为本站会员(fatcommittee260)主动上传,麦多课文库仅提供信息存储空间,仅对用户上传内容的表现方式做保护处理,对上载内容本身不做任何修改或编辑。 若此文所含内容侵犯了您的版权或隐私,请立即通知麦多课文库(发送邮件至master@mydoc123.com或直接QQ联系客服),我们立即给予删除!

Internet Cache Pollution Attacks and Countermeasures.ppt

1、Internet Cache Pollution Attacks and Countermeasures,Yan Gao, Leiwen Deng, Aleksandar Kuzmanovic, and Yan Chen,Electrical Engineering and Computer Science Department Northwestern University,2,Outline,Motivation Pollution Attacks Evaluation of Pollution Effects Counter-Pollution Techniques & Evaluati

2、on Conclusion,3,Motivation,Caching has been widely applied in the Internet Decrease the amount of requests in server side Reduce the amount of traffic in the network Improve the client-perceived latency Open proxy caches are used for various abuse-related activities Proxy caches themselves become vi

3、ctims Little attention given to such attacks Existing pollution attacks mostly on content pollutions on P2P systems,4,Contributions,Propose a class of pollution attacks targeted against Internet proxy caches Locality-disruption (LD) attacks False-locality (FL) attacks Analyze the resilience of the c

4、urrent cache replacement algorithms to pollution attacks Propose two cache pollution detection mechanisms Detect LD, FL attacks, and their combination Leverage data streaming computation techniques,5,Outline,Motivation Pollution Attacks Evaluation of Pollution Effects Counter-Pollution Techniques &

5、Evaluation Conclusion,6,Pollution Attack Scenarios (I),Attacking a web cache,Attacking an ISP cache,7,Pollution Attack Scenarios (II),Pollution attack against a local DNS server,8,Pollution Attack: Locality Disruption,Cache,Cache,Before attack,After attack,Popular files,New unpopular files,Goal: deg

6、rade cache efficiency by ruining its file locality Activities: continuously generate requests for new unpopular files,9,Pollution Attack: False Locality,Cache,Cache,Before attack,After attack,Popular files,Bogus popular files,Goal: degrade the hit ratio by creating false file locality Activities: re

7、peatedly request the same set of unpopular files,10,Outline,Motivation Pollution Attacks Evaluation of Pollution Effects Counter-Pollution Techniques & Evaluation Conclusion,11,Evaluation Methodology,Discrete-event simulator Multiple DoS behaviors Multiple workload characterizing behaviors Effects o

8、f access and local network capacities Workloads P2P K. Gummadi et al. ACM SOSP 03 Web F. Smith et al. SIGMETRICS 01 NAT effects,12,Cache Replacement Algorithms,Least Recently Used (LRU) algorithm Evict the least recently accessed document first Least Frequently Used (LFU) algorithm Evict the least f

9、requently accessed document first Greedy Dual-Sized Frequency (GDSF) algorithm Consider the frequency of the documents Allow smaller document to be cached first Use dynamic aging policy,13,Baseline Experiments,Locality-disruption attacks,Small percent of malicious requests can significantly degrade

10、the overall hit ratio,Total hit ratio =,Including attackers requests and regular users requests,Stealthy! (4%),14,Baseline Experiments,False-locality attacks,Total hit ratio is not a good indicator for attacks,15,BHR(n)byte hit ratio of regular clients without attacks BHR(a)byte hit ratio of regular

11、 clients with attacks,Byte damage ratio =,16,Replacement Algorithms,Locality-disruption attacks,LRU and LFU are more resilient to attacks, but still can not protect cache from pollution,17,Outline,Motivation Pollution Attacks Evaluation of Pollution Effects Counter-Pollution Techniques & Evaluation

12、Conclusion,18,Detecting Locality Disruption Attacks,Observations: Low total hit ratio Short average life-time of all cached files Design: Detection: compute the average durations for all files in the cache Mitigation: recognize the attackers,19,Detecting False Locality Attacks,Observations: Clients

13、who request a similar set of files residing in the cache The repeated requests from the same IP to cached files Design: Large number of repeated requests Large percent of repeated requestsScalability: Attacker-based detection: Bloom filter Object-based detection: Probabilistic Counting with Stochast

14、ic Averaging (PCSA),20,Evaluation of Pollution Detection,Results for false-locality attacks, more in paper,For attackers file detection: True positive ratio =,21,Realize the counter-pollution mechanismsCode and more detailshttp:/networks.cs.northwestern.edu/AE/,Implementation,22,Conclusions,Propose

15、and evaluate two classes of attacks: locality-disruption and false-locality attacks Show that pollution attacks are stealthy, but powerful, and different replacement algorithms have different resiliency Propose and evaluate a set of scalable and effective counter-pollution mechanisms,23,Thank You !,Questions?,

copyright@ 2008-2019 麦多课文库(www.mydoc123.com)网站版权所有
备案/许可证编号:苏ICP备17064731号-1