匿名通信系统中基于多Hash编码标记技术的匿名滥用控制策略

匿名通信系统采用重路由、流量填充的方式隐藏网络用户的IP地址等识别信息,为合法用户的通信提供匿名保护。然而,由于缺乏有效的控制,导致系统容易被滥用以进行DDoS攻击。论文提出在重路由匿名通信系统中引入基于多Hash编码的滥用控制策略,根据被标记的数据报文重构攻击路径,定位攻击者。对于合法用户,由于其流量小,被标记的报文数目低于重构所需的报文数,匿名性得到保持。因而,匿名系统能在提供匿名保护的同时,有效地防止匿名滥用。而且,由于采用多Hash编码,在系统规模增大时,仍能保持较低的误判率,保持定位攻击者的精确度。

Anonymity Abusing Control Strategy Based on Multi-hash Encoding in Anonymous Communication System

In order to provide anonymity for legal user in Internet,anonymous communication system hides identification of user such as IP address by rerouting and traffic padding mechanism.There is,however,not corresponding mechanism to defend anonymity abusing,which may result in DDoS attack launched by malicious user in the system.In this paper,an anonymity abusing control strategy based on multi-hash encoding is proposed in the rerouting-based anonymous communication system.Through collecting enough marked message,victim could reconstruct the attack path and figure out the attack source.Meanwhile,legal user's identity is kept anonymous,since the number of marked message could not reach the one needed to reconstruct the attack path.Therefore,anonymous communication system can not only provide anonymous protection but also prevent anonymity abusing.In addition,adopting Multi-hash encoding can maintain lower false rate and enhance precision of orientating attacker in large-scale system.