DDoS攻击及主动防御模型研究  

Research on DDoS Attacks and Proactive Defense Model

作　　者：刘旭勇[1] 

机构地区：[1]西北大学,陕西西安710069

出　　处：《计算机技术与发展》2008年第7期143-145,152,共4页Computer Technology and Development

基　　金：国家自然科学基金重点资助项目(60433010)

摘　　要：DDoS(分布式拒绝服务)攻击正在对整个互联网产生巨大的危害和严重的经济损失,且不断增大。通过介绍DDoS攻击原理和分析DDoS攻击网络的控制机制,提出基于蜜网的防御DDoS攻击方法,鉴于目前大多数DDoS攻击都是黑客利用其控制的僵尸网络发起的,部署了改进版的蜜网,利用蜜罐收集的信息,打入黑客控制的僵尸网络内部,获取重要信息,切断黑客的远程控制机制,从根源上阻止DDoS攻击远程控制网络的形成,以达到主动防御的目的。DDoS （distributed denial of service） attack is doing great harm and serious economic loss for entire Intemet, which become worse and worse. Puts forward the defense DDoS attack method based on honeynet after the concept of DDoS attack is introduced and the controlling mechanism of its attack network is analyzed. In view of the fact that most of DDoS attacks are from hackers who make use of the botnet of its control, annotmce the information that improves the honeynet and collects using honeypot. Therefore,it is important to enter the hornet inside of hacker control, get important information, cut off the remote control mechanism of hacker, and prevent building remote control network for DDoS attack from root - cause so that proactive defense is achieved.

关 键 词：分布式拒绝服务 蜜网 僵尸网络 远程控制网络 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]