DDoS攻击防范技术研究  

The Preventive Technology of DDoS

作　　者：张云峰[1] 赵逸智[1] 

机构地区：[1]北华航天工业学院,河北廊坊065000

出　　处：《北华航天工业学院学报》2009年第5期18-20,共3页Journal of North China Institute of Aerospace Engineering

摘　　要：分布式拒绝服务攻击(distributed denial of service,DDoS)已经对Internet的稳定运行造成了很大的威胁。在典型的DDoS攻击中,攻击者利用大量的傀儡主机向被攻击主机发送大量的无用分组,造成被攻击主机CPU资源或者网络带宽的耗尽。本文在介绍DDoS攻击原理和分析DDoS攻击网络的控制机制后提出了一种新的基于蜜网(honeynet)的主动防御方案,利用网络陷阱与跟踪技术,从根源上阻止DDoS攻击远程控制网络的形成,以达到主动防御的目的。Distributed denial of service attack（DDoS） brings a very serious threat to send to the stability of the Internet. In a typical DDoS attack, a large number of compromised hosts are amassed to send useless packets to jam the CPU or Internet connection of victim. The concept of DDoS attack is introduced and the controlling mechanism of its attack network is analyzed. A new preventive defending scheme based on honeynet technology is presented, which employs network trapping and tracking technology to prevent build- ing remote control network for DDoS attack from root-cause so that proactive defense is achieved.

关 键 词：分布式拒绝服务攻击 直接攻击 反射攻击 密网 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]