【摘要】 包采样应用于检测网络流量计费、入侵检测、端到端链路质量分析,包采样机制必须具有避免敌意主机攻击与逃避网络计费数据包采样的能力.主要分析IETF包采样工作组建议的被动包采样预防机制及其存在的安全漏洞,详细阐述基于PSAMP模型的非协同包采样与协同包采样的固定采样周期、历史信息使用、探知采样选择范围的安全性.提出伪随机函数协同包采样形式化定义的规则设置与安全条件,以避免包采样泄漏信息给敌意主机,从而提高基于PSAMP包采样的安全性.更多还原

【Abstract】 Packet sampling Can be applied to the detection of network traffic accounting,intrusion detection,and end to end link quality analysis.The sampling system must have the ability to avoid the hostile attack and evade the host network accounting packet sampling This paper analyzes the Passive Packet sampling mechanism recommended by the EETF pack sampling working group and its security valnerabilities;then it describes the fixed sampling period, the usage of historical informention and the safty of sampling selection of PSAMP sampling wrder the case of non-cooperative and collaborative pachet samplings.Finany,it puts out the set of rules and stfty conditions made by pseudo-random funtion of cooperalive pachet sampling,to avoid leaking information to hostile host and erhance the seurity of it.更多还原