The Research On Web Services DoS Attacks Modeling Method

Web service is a kind of self-contained loosely-coupled application.With web service being widely used,its security is also growing.Web service run in the open and complex environment,so the web service is vulnerable to various attacks from the outside world.Do S attack is one of the main attacks web service face.When Do S attack happens,the attacked server or the network can't normally accept and deal with the outside legal requests,leading to the decrease of the security of the web service.In order to be as early as possible for the web service to predict and defend the Do S attack,the paper work is as follows:? Analyzing the web service security features,summarizing the main attack and its reason existing in the web service,we take web service Do S attack as the research object,deeply understanding web service Do S attack attack way,attack procedure and attack principle,laying the foundation for putting forwarding effective web service Do S attack defense method.? Using random high-level petri net to model the web service Do S attack.Using the homogeneous characteristics of markov chain with stochastic high-level petri net,we transfer the built high-level stochastic petri net models into markov chain by reasonable transformation rules.Calculate the probability value based on the steady state probability distribution under Do S attacks on Web service according to the mathematical properties of markov chain,predicting the possibility of the web service Do S attack.? Analyzing the web service security standards(WSS),aiming at security tokens in WSS to be used in the Web service provider and the requester,lacking of web services Do S attack defense mechanism based on the source addresses forgery,this paper proposes a new security token,at the same time take the asymmetric encryption algorithm RSA encryption to protect the security token.? Combining with the online shopping system for case study,we verify the proposed defense web service Do S attack method is effective through the Do S attack simulation experiment.