检测DRDoS攻击的新方法  

Novel detecting method for DRDoS attack

作　　者：贺燕[1] 任平安[1,2] 马建峰[2] 

机构地区：[1]陕西师范大学计算机科学学院,西安710062 [2]西安电子科技大学计算机科学学院,西安710071

出　　处：《计算机工程与应用》2011年第6期119-121,共3页Computer Engineering and Applications

基　　金：国家自然科学基金No.60872041~~

摘　　要：基于Hiroshima Tsunoda等人的简单回应包确认机制模型提出一个改进模型,增加了监视器,有利于对正常连接的响应,从而提高服务速度,匹配器的二次检测确保了异常包的检测率不变。假设回应包总数为n,当异常包的概率p<1-1/(20n)时该模型的时间复杂度优于原模型。Based on the simple response packet confirmation mechanism proposed by Hiroshima Tsunoda etc,this paper presents a novel model which adds a monitor to Hiroshima Tsunoda＇s model in order to response normal connection well and to increase the speed of service, moreover detecting abnormal packet once again in comparator ensure the detection rate.Suppose the total response packet is n,when the rate of abnormal package is less than √1-1/（20n） ,the time complexity of this model is less than that of Hiroshima Tsunoda＇s model.

关 键 词：DRDOS 攻击检测 响应包数量 时间复杂度 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]