分布式拒绝服务攻击检测分析与优化  

Analysis of Distributed denial-of-service attack detection

作　　者：荆杰[1] 任新华[1] 马基骁[1] 

机构地区：[1]太原理工大学计算机与软件学院,山西太原030024

出　　处：《计算机安全》2008年第8期42-44,共3页Network & Computer Security

摘　　要：分布式拒绝服务攻击(DDoS)是网络安全的重大威胁之一,易于实施并难以防范。该文描述了目前两类主流的DDoS攻击检测方法:基于协议特征和基于网络流量统计的攻击检测方法,并分析了两类检测方法的优点和存在的问题,提出和归纳出一些优化思想和改进方法。Distributed denial of service （DDoS） attack, which is easily produced but hard to avoid, is one of the major threats in network security. In this paper, two major DDoS detection methods, protocol-based detection method and traffic statistics based detection method, were discussed. Then, strengths and weaknesses of these methods are analyzed and some optimizations and improvements are also proposed in this paper.

关 键 词：分布式拒绝服务攻击 攻击检测 协议特征分析 网络流量统计 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.11[自动化与计算机技术—计算机科学与技术]