一种基于交互行为的DDoS攻击防御方法  

A METHOD FOR DDoS ATTACKS PREVENTION BASED ON INTERACTION ACTIVITY

作　　者：时静艳[1,2] 吴琨[1,2] 曾庆凯[1,2] 吕志军[1,2] 

机构地区：[1]南京大学计算机软件新技术国家重点实验室 [2]南京大学计算机科学与技术系,江苏南京210093

出　　处：《计算机应用与软件》2006年第12期28-30,74,共4页Computer Applications and Software

基　　金：国家高技术研究发展计划863课题(2004AA147070);国家自然科学基金(60473053)。

摘　　要：现有的DDoS攻击防御方法,通常由受害系统在对攻击流量进行分析的基础上识别出攻击者并进而采取相应的措施,而攻击特征的隐蔽性使得识别正确率很低。针对这一情况,提出了一种基于交互行为的DDoS攻击防御方法,该方法由受害系统在同客户进行交互的过程中识别出攻击者;并将应用目标与攻击防御相结合,建立了一个包括系统监测、攻击识别以及访问控制功能模块在内的整体模型;最后将该模型应用于Apache服务器,实验证明该方法是实用有效的。The existing methods for DDoS attacks prevention usually require the protected system to analyze the attack stream to find out the attackers. But the attack stream is easy to be hidden in the common stream, which makes all of these methods inefficient. A prevention method based on interaction activity is proposed under these circumstances. During the period of attacks, server communicats with the suspicious clients to determine the attackers. The prevention method is combined with the application environment, and a prevention model is established which consists of system monitor, attacker identification, access control and so on. Then the model is deployed in Apache Web server to testify the high performance of the method.

关 键 词：分布式拒绝服务攻击 交互行为 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]