欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
针对TrustZone架构中，恶意CA长时间占用会话资源引起DOS攻击的问题，提出了一种TrustZone架构中的会话调度方案（TSSP）。结合TrustZone会话执行的特点，给出了会话等待队列、执行队列的构建方法，同时引入了等待队列会话优先级、执行队列会话剩余价值的计算方法，在此基础上，对会话调度策略进行详细的阐述。通过实验证明了本方案能够保证高优先级的会话优先执行，同时能够有效抵抗由于恶意CA长时间占用会话资源引起的DOS攻击。最后，从安全与性能两个方面对加入会话调度机制后的系统进行评估。实验结果表明，加入调度机制后，在保证系统安全性的基础上，增加的性能开销在0．01—0．27s之间。
英文摘要：
In TrustZone architecture, a malicious CA occupying session resources for a long time usually introduces DOS attacks. To solve this problem, a TrustZone session scheduling protocol （TSSP） was proposed. Combined with the features of session execution in TrustZone architecture,the construction method of session waiting queue and execution queue was introduced. Meanwhile, the calculation methods of session priority in waiting list and session surplus value in executing list were proposed. Based on this, the session scheduling strategy was detailed described. The experimental results showed that this protocol could ensure that session with high priority be executed first and could resist DOS attack induced by malicious CA occupying session resources for a long period of time. Finally, the security and performance evaluations of the system added with session scheduling mechanism were done. The results showed that on the premise of ensuring system security the performance overhead added is between 0.01 and 0.27 s.
同期刊论文项目
同项目期刊论文
期刊信息
位置：