基于TCP_IP报头分析和主动测试的DDoS攻击响应机制  

DDoS defense using TCP_IP header analysis and proactive tests

作　　者：叶震[1] 施伟伟[1] 

机构地区：[1]合肥工业大学计算机与信息学院,安徽合肥230009

出　　处：《合肥工业大学学报（自然科学版）》2010年第3期363-367,共5页Journal of Hefei University of Technology：Natural Science

摘　　要：为了抵御分布式拒绝服务攻击(DDoS),必须解决的一个关键问题是如何有效地从正常的数据流中隔离出攻击流。文章提出了基于TCP_IP报头分析和主动测试的响应机制:使用动态更新的规则集来分析TCP_IP报头以抵御如UDP Flood这类的无连接攻击,通过主动测试机制来抵御面向连接的攻击。仿真结果验证了该机制的有效性。To defend against distributed denial of service （DDoS） attacks, one critical issue is to effectively isolate the attack traffic from the normal ones. A novel DDoS defense scheme based on TCP-IP header analysis and proactive tests is hereby proposed. By analyzing the TCP_IP header, the well defined rule set is designed to defend the connectionless oriented attack, such as UDP flood attack. Meanwhile, the proactive test based differentiation technique is proposed to handle connection-oriented attack. Simulation results validate the effectiveness of said scheme.

关 键 词：DDOS 响应 TCP_IP报头 主动测试 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]