运营商抵御DDoS攻击的安全解决方案  

Security solution of telecommunication services defeating distributed denial of service attacks

作　　者：汤丹[1] 匡晓红[2] 蒋光和[2] 胡志刚[1] 

机构地区：[1]中南大学信息科学与工程学院,湖南长沙410083 [2]湖南公安高等专科学校计算机科学技术系,湖南长沙410006

出　　处：《计算机工程与设计》2006年第21期4028-4032,共5页Computer Engineering and Design

基　　金：湖南省自然科学基金项目(05jj40128)

摘　　要：随着Internet的发展,DDoS攻击成为了当今企业应用实实在在的威胁,更为严重的是现在尚无完全令人满意的防护手段;以典型的DDoS攻击为案例,针对运营商的网络安全现状,在系统分析现有的常规防御技术手段的基础上,结合相关安全管理策略,设计了一套涉及预防、监控/识别、安全加固调整和恢复等关键环节的综合抵御DDoS攻击安全解决方案;实际运行表明,按照本方案防护的系统在DDoS攻击实施时仍然能够提供正常的服务。With the development oflnternet, DDoS attacks turn into a substantial threat to todays enterprise application, further more there is no completely satisfying protection yet. Aimed at the network security status oftelecommunication services, based on the systems analysis ofexisting routine technic means ofprotection, combined with corresponding security management policy, a integrated security solutions defeat the attack of DDoS is devised. The solution is related to preventive measure, monitoring and identifying, security enhancement and restoring. Two years running shows that systems protected in such a way can deliver regular service while under attack.

关 键 词：分布式拒绝服务 安全管理 安全技术体系 流量攻击 防火墙 入侵检测系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]