DDoS攻击原理及防御方法分析  

Analysis of Principle and Defense of DDoS Attacks

作　　者：曾文权[1] 向友君[2] 尚敏[1] 

机构地区：[1]广东科学技术职业学院计算机工程技术学院,广东广州510640 [2]华南理工大学电子与信息学院,广东广州510640

出　　处：《计算机技术与发展》2009年第7期156-158,162,共4页Computer Technology and Development

基　　金：广东省自然科学基金项目(04010589)

摘　　要：DDoS(分布式拒绝服务)攻击是目前对互联网的安全稳定性带来较大威胁的攻击形式之一,给各电信运营商、互联网服务商、金融企业等一大批重要的互联网用户带严峻挑战。因此,对其攻击机理以及防御方法的研究近年来引起了人们的普遍关注。为了寻求有效应对DDoS攻击的防御策略,探讨了DDoS攻击的原理、分类,并对目前一些主流的防御方法进行了深入研究,分析和比较了各自所具有的优缺点。提出了采取大范围分布式防御、多技术融合、主动防御的应对方法和建议。DDos （distributed denial of service） attacks are currently on the Internet security threat to the stability of the larger form of attack, to the telecom operators, Internet service providers, financial finns, such as a large number of Interact users with important challenges. Therefore, the mechanism of their attack and defense methods in recent years has aroused widespread concern. In order to seek an effective response to DDoS attacks on the defense strategy, discusses the principle of DDoS attacks, classification, and presents some of the mainstream of defense indepth research, analysis and compared with their respective advantages and disadvantages. Finally, take the large- scale distributed defense, multi - technology integration, active defense response methods and recommendations.

关 键 词：分布式拒绝服务 互联网安全 防御系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]