基于网络异常流量判断DoS/DDoS攻击的检测算法  

Judgment DoS/DDoS Attacks Detection Algorithm Based on Network Abnormal Flow

作　　者：刘勇[1] 香丽芸[1] 

机构地区：[1]昌吉学院计算机应用研究所,新疆昌吉831100

出　　处：《吉林大学学报（信息科学版）》2008年第3期313-319,共7页Journal of Jilin University（Information Science Edition）

摘　　要：为了对泛洪DoS/DDoS(Denial of Service/Distributed Denial of Service)攻击做出准确判断,在对泛洪DoS/DDoS攻击发生时网络流量变化特性进行分析的基础上,给出一种基于网络异常流量判断泛洪DoS/DDoS攻击的检测算法。该算法通过对流量大小和波动趋势的判断,对泛洪DoS/DDoS攻击的发生进行检测。实验结果表明,在不失一般性的基础上,判断泛洪DoS/DDoS攻击的成功率为100%。In order to make an accurate judgement,on the base of analyzing the change of network flow when the network flow of DoS/DDoS（Denial of Service/Distributed Denial of Service） is attacking,a detection algorithm is presented based on the judgement of the abnormal network flow.It detects the attack of the network flow of DoS/DDoS with the judgement of flow size and fluctuation trend.The test results show that the success rate of judging the network flow of DoS/DDoS attacking is 100%,which is on the base of not losing the generalization.

关 键 词：DOS/DDOS攻击 Internet协议版本6(IPv6) 流量检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]