基于地址聚集防抖动异常流量控制系统  

Address-aggregated Wobble-defended Abnormal-traffic Control System

作　　者：吴国庆[1] 

机构地区：[1]扬州市信息中心,扬州225009

出　　处：《计算机工程》2008年第1期175-177,180,共4页Computer Engineering

基　　金：江苏省科技攻关基金资助项目(BE2007058)

摘　　要：提出一种新的异常流量检测方法——基于地址聚集的防抖动异常流量检测系统AWACS。该系统应用Adapted-Bloom-Filter算法对目的IP地址聚集,运用防聚集抖动的CUSUM算法检测是否有流量抖动的脉冲式攻击发生,使检测的结果更加准确,减少了系统的开销。该检测系统已作为一个独立的模块,成功运行于核心路由器中。This paper presents a new abnormal traffic detection method： address-aggregated wobble-defended abnormal-traffic control system. This system employs adapted-bloom-filter algorithm to assemble purpose IP addresses, then uses wobble-defended CUSUM algorithm to detect pulsing denial of service attack, the method can work exactly and it declines the spending of system resources at maximum. A detection system employing this method has been run successfully in routers as an individual module.

关 键 词：路由器 拒绝服务 防抖动 聚集 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]