一种针对SYN-Flooding攻击的防范方法  

Study on Defense against a SYN-Flooding Attack

作　　者：黄勤[1] 廖伟[1] 刘益良[1] 李楠[1] 杨洁[1] 

机构地区：[1]重庆大学自动化学院,重庆400044

出　　处：《计算机科学》2005年第10期84-86,共3页Computer Science

基　　金：重庆市自然科学基金(CSTC;2004BB2181)

摘　　要：针对SYN-Flooding攻击的特点,分析了几种防御SYN-Flooding攻击的方法,本文提出了一种TCP/IP“一次握手”协议防御方法,即服务器对客户端的传输连接响应通过代理服务器判断,按照前向神经网络的时间统计概率PE值后排序提交,解决了分布式拒绝服务攻击,特别是系列攻击和重复攻击对资源过量占用引起系统瘫痪的问题。攻击防御实验表明,本文方法防御SYN-Flooding攻击有明显效果。The existing mehods of defense against SYN-Flooding attack have been analyzed. And then, a new method called TCP/IP-“Shake hands once” to prevent the SYN-Flooding attack, in which the system crashes because of the source exhausted, is pointed out in this article. The response of the server on the clients for transfer is made by the attorney, and the service of the server to the clients will be arranged according to the PE. The result of the experiments shows that the method is more effective than others.

关 键 词：SYN-Flooding 防范对策 握手协议 SYN-Flooding攻击 防范方法 分布式拒绝服务攻击 代理服务器 防御方法 TCP/IP 前向神经网络 统计概率 系统瘫痪 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393[自动化与计算机技术—计算机科学与技术]