大流量分布式拒绝服务攻击的防御策略研究  

Research on high-rate distributed denial of services attack

作　　者：王冬琦[1] 郭剑峰 常桂然[1] 

机构地区：[1]东北大学信息学院,辽宁沈阳110004 [2]辽宁省信息安全与软件测评认证中心,辽宁沈阳110001

出　　处：《信息网络安全》2009年第7期17-20,共4页Netinfo Security

摘　　要：大流量分布式拒绝服务攻击(High-rate Distributed Denial of Service Attack)是指导致网络流量激增,呈明显异常的"淹没受害者"式的DDoS,简称HDDoS。与其相对应的概念是低流量DDoS。通过建立、分析HDDoS的概念模型总结了其特点、分析了当前HDDoS防御策略的发展趋势。提出了一种基于离群数据挖掘算法的HDDoS防御策略ODM方法。实验证明,ODM方法解决了DDoS过滤中产生的间接伤害无法恢复的问题,是防御HDDoS的一种新思路。High rate distributed denial of service attack（HDDoS） refers to DDoS attack that whose traffic is huge, and lead to a great abnormity comparing to normal circumstance. It is a flood-style DDoS. This paper summarizes characteristics of HDDoS, analyzes trends of HDDoS defense strategy. Give out a outlier detection based HDDoS defense strategy, the ODM method. Experiments show that the ODM method figures out how to mitigate the indirect damage caused by DDoS filtering. The ODM method shows a new way to handle HDDoS.

关 键 词：网络安全 分布式拒绝服务攻击 离群数据挖掘 间接伤害 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]