基于IXP1200的DDOS攻击防御系统设计与实现  

Desing and Implementation of DDoS Defendable System Based on IXP1200

作　　者：刘明[1] 张少波[1] 党力明[1] 

机构地区：[1]解放军信息工程大学理学院,河南郑州450001

出　　处：《电气电子教学学报》2010年第B10期206-208,222,共4页Journal of Electrical and Electronic Education

摘　　要：随着互联网的推广，网络安全问题日益严重。本文介绍了如何设计并实现一个高效、高处理速度的专用DDoS攻击防御系统。文章选用IXP1200网络处理器开发板作为DDoS攻击防御系统的开发平台，给出了基于高效检测算法的防御系统实现方案，给出了防御系统数据平面软件的设计、开发和调试，并完成了系统联调以及性能测试。With the developing and spreading of Internet, the problem of network safety emerges. This paper focuses on how to design and realize a high security and high speed processing DDoS defense system. The IXP1200 NP is chosen as the hardware develop board. The paper provides a scheme of system realization based on the detection algorithm. It also presents the design and realization of software on the system＇s data plane. The software is developed and debugged on the hardware board. In succeed, the joint debug of the whole system is accomplished.

关 键 词：分布式拒绝服务攻击 防御系统 变化检测 非参数CUSUM算法 网络处理器 

分 类 号：TN915.05[电子电信—通信与信息系统]