基于DDoS攻击的检测防御模型的研究  

Research on the Model of Detection and Defence Based on DDoS Attacks

作　　者：田晓朋[1] 邬家炜[1] 陈孝全[1] 

机构地区：[1]华南师范大学计算机学院,广东广州510631

出　　处：《计算机工程与科学》2009年第1期14-16,43,共4页Computer Engineering & Science

摘　　要：本文介绍了DDoS攻击的原理和传统DDoS检测防御系统的缺点,提出了一种全面、主动、有效的DDoS防御模型,引入了移动Agent技术、Honeypot技术以及MVP技术。本模型的移动Agent技术真正、有效地实现了分布式检测;Honeypot实现主动防御,诱导攻击进入蜜罐主机,保护真实的网络环境;MVP技术则有效地分离了合法流量和恶意流量。该模型部署和操作简单,具有良好的工程应用前景。The paper introduces the theory of DDoS attacks and the demerits of traditional DIDOS detection and defence systems, proposes a complete, active and effective DIDOS defense model, and describes the mobile agent technologies, Honeypot and MVP. The model＇s mobile agent technology really and effectively realizes distributed intrusion detection. Honeypot realizes active defence,and induces the attacks to enter the Honeypot server, thus protects the real network environment. MVP separates the legal flow from the malignant flow. The model is easy to deploy and operate and has a very good engineering prospect.

关 键 词：分布式拒绝服务 移动AGENT HONEYPOT MVP 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]