DDoS攻击防御模型的仿真研究  

Research of Simulation on Defence Model of DDoS Attack

作　　者：莫家庆[1] 胡忠望[1] 

机构地区：[1]肇庆学院计算机学院,肇庆526061

出　　处：《北方工业大学学报》2011年第3期7-11,28,共6页Journal of North China University of Technology

基　　金：广东省高等学校人才引进专项资金项目(粤财教[2010]343号)

摘　　要：针对DDoS攻击的特点,提出一个基于协议类型判断和流量控制以及拥塞控制的DDoS攻击防御模型,并给出了模型中相关统计值的表达式,以及检测和防御的算法流程.在OPNET中针对典型的TCP SYN flood攻击防御给出了详细的节点建模过程.运用二组不同强度的攻击流进行试验,分析在启用防御机制和未启用防御机制时服务器对攻击流的处理效果.仿真实验表明,此模型对于不同强度的攻击流都有较好的抑制作用,证明了此模型的有效性.A defence model of DDoS attack,based on judgement of protocol type, flow control and congestion control with the features of DDoS attack,is presented. The expressions of the relevent statistic values of this model and the algorithm of detection and defence are given. The detailed node modeling process is given referring to the typical defence of TCP SYN flood in OPNET modeler. Two attack traffics of varying strengths are used in the experiment, and the effect of the server on the attack traffics is analyzed when the defence mechanism is working and not respectively. Simulation experiments show that this model has a better inhibitory effect for different strengths of attack traffics and proves the validity of this model.

关 键 词：分布式拒绝服务攻击 防御模型 协议分析 网络仿真 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]