剖析DDoS攻击对抗技术  

Defense Technology of DDoS Attacks

作　　者：张静[1] 胡华平[1,2] 刘波[1] 肖枫涛[1] 陈新[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073 [2]六一零七零部队,福建福州350003

出　　处：《信息安全与技术》2010年第7期46-54,59,共10页

摘　　要：由于目前Internet的体系结构、认证机制的缺乏等多方面原因使得DDoS攻击很容易发生,而且僵尸网络的快速发展也为DDoS攻击提供了强大的工具。DDoS(Distributed Denial of Service)攻击一直是网络安全的主要威胁之一,如何对抗DDoS攻击成为网络安全研究的热点之一。在对DDoS攻击模型、产生原因进行分析的基础上,从攻击预防、攻击检测、攻击响应和攻击源追踪四个方面对现有的DDoS攻击对抗技术进行综述,并提出了值得研究的方向建议。Because of the present architecture of Internet and the lack mechanism of certification making DDoS attacks occurs very easy. And the fast development of botnet has been offered powerful tool for DDoS attacks. DDoS attack is one of major threat of network security, so how to defend DDoS attacks become a hot point of network security research. Based on the model of DDoS attacks and analyzing the reason of attacks＇ occur, we introduce the defense technology of DDoS attacks from four aspects： attack prevention, attack detection, attack response and attack source tracking. In the last, we suggest the worthy research points.

关 键 词：DDOS 僵尸网络 对抗技术 攻击预防 攻击源追踪 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]