基于移动代理的分布式拒绝服务攻击防御模型  

A model for defending against DDoS attacks based on mobile-agent

作　　者：叶茜[1] 张基温[1] 

机构地区：[1]江南大学信息工程学院,江苏无锡214122

出　　处：《计算机应用》2006年第7期1646-1648,共3页journal of Computer Applications

摘　　要：使用报文标记和移动代理技术,构建基于移动代理的分布式拒绝服务(DDoS)攻击防御模型,在很大程度上降低了来自ISP域外的分布式拒绝服务攻击对域内主机的影响。并利用移动代理的容错性,使模型中重要元件具有很好的抵抗分布式拒绝服务攻击的性能,提高了防御模型自身的抗攻击性。最后讨论了模型的具体实现。A model for defending against DDoS（ Distributed Denial of Service） attacks based on mobile agent was proposed, using the technique of packet marking and mobile agent. This model can minimize the damage of the DDoS attacks in the ISP domain. The model has a good anti-attack character by mobile agent＇s tolerant ability and the components can resist the DDoS attack. Finally, the implementation of the model was discussed.

关 键 词：分布式拒绝服务 移动代理 报文标记 数据包过滤 攻击签名 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]