以封包標注為基礎之分散式阻絕服務攻擊 封包過濾及阻塞之近似最佳化聯防策略

Presentation on theme: "以封包標注為基礎之分散式阻絕服務攻擊 封包過濾及阻塞之近似最佳化聯防策略"— Presentation transcript:

1 以封包標注為基礎之分散式阻絕服務攻擊 封包過濾及阻塞之近似最佳化聯防策略
Near-optimal Joint Defense Strategies against DDoS Attacks Based upon Packet Filtering and Blocking Enabled by Packet Marking Mechanism 以封包標注為基礎之分散式阻絕服務攻擊 封包過濾及阻塞之近似最佳化聯防策略 Advisor: Prof. F. Y. S. Lin Presented by C.W. FanChiang

2 Agenda Introduction Scenario Assumption Formulation

3 INTRODUCTION

4 Introduction “Worldwide Infrastructure Security Report”

5 Introduction The network administrator, as the defender, must effectively utilize its limited resources and develop a defense strategy to maximize the contribution of defense resources. Defense resouces Packet Marking Packet Filtering Blocking

6 Introduction Packet Marking Scheme

7 SCENARIO

8 Scenario

9 Scenario

10 Scenario

11 Scenario

12 Scenario

13 Scenario

14 ASSUMption

15 ASSUMpTION

16 FORMULATION

17 ARACTS MODEL- given parameters

18 ARACTS MODEL- given parameters

19 ARACTS MODEL- given parameters

20 ARACTS MODEL- Decision variables

21 ARACTS MODEL- Decision variables

22 ARACTS MODEL

23 ARACTS MODEL

24 ARACTS MODEL

25 Auxiliary variAbles

26 PPM-FRABS model

27 Methodology Lagrangean Relaxation Simulated Annealing
Divide-and-Conquer Simulated Annealing Iteration by iteration

28 Thanks for your listening