一种全面主动的防御DDoS攻击方案  

A comprehensive and active scheme to prevent DDoS Attacks

作　　者：汤丽娟[1] 张永平[1] 张立莉[1] 

机构地区：[1]中国矿业大学

出　　处：《微计算机信息》2007年第18期35-37,共3页Control & Automation

摘　　要：DDoS攻击的防御是当前网络安全研究领域中的难点。文章提出的方案能够全面、主动预防DDoS攻击。使用蜜罐技术能够预防已知类型的DDoS攻击;使用基于RBF-NN能够实时检测DDoS攻击,检测率可以达到97.9%;使用分块包标记算法进行追踪能够保持较低的重构误报率和较低的计算复杂度;使用分组漏斗的负载均衡技术能够有效的缓解攻击效果,保证了服务质量。该方案所采用的技术,实现简单,代价小,具有很好的实际应用前景。The defense of DDoS attacks has become the difficult area in network security.The proposed scheme can prevent DDoS attacks roundly and actively.It implements detector based on RBF-NN to detect DDoS attacks ,and the precise can reach 97.9%;implements an IP traceback scheme with packet marking in blocks,which provides higher precision and more efficient computation;implements a novel approach named Packet funneling to mitigate DDoS attacks,it ensures the quality of service. The technology of the scheme is practical and easy to deploy,low price,it has the very good application prospect.

关 键 词：分布式拒绝服务 拒绝服务 神经网络 IP追踪 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]