DDoS Defense Algorithm Based on Multi-Segment Timeout Technology  

作　　者：DU Ruizhong YANG Xiaohui MA Xiaoxue HE Xinfeng 

机构地区：[1]Institute of Network Technology, Hebei University, Baoding 071002, Hebei, China

出　　处：《Wuhan University Journal of Natural Sciences》2006年第6期1823-1826,共4页武汉大学学报（自然科学英文版）

基　　金：Supported by the Natural Science Foundation ofHebei Province (F2004000133)

摘　　要：Through the analysis to the DDoS（distributed denial of service） attack, it will conclude that at different time segments, the arrive rate of normal SYN （Synchronization） package are similar, while the abnormal packages are different with the normal ones. Toward this situation a DDoS defense algorithm based on multi-segment timeout technology is presented, more than one timeout segment are set to control the net flow. Experiment results show that in the case of little flow, multi-segment timeout has the ability dynamic defense, so the system performance is improved and the system has high response rate.Through the analysis to the DDoS（distributed denial of service） attack, it will conclude that at different time segments, the arrive rate of normal SYN （Synchronization） package are similar, while the abnormal packages are different with the normal ones. Toward this situation a DDoS defense algorithm based on multi-segment timeout technology is presented, more than one timeout segment are set to control the net flow. Experiment results show that in the case of little flow, multi-segment timeout has the ability dynamic defense, so the system performance is improved and the system has high response rate.

关 键 词：DDoS（distributed denial of service） multi-segments timeout dynamic defense net flow analysis 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]