DDoS客服协同防御机制研究  

DDoS defense scheme using collaboration of client and servers

作　　者：黄强[1] 叶震[1] 

机构地区：[1]合肥工业大学计算机与信息学院,安徽合肥230009

出　　处：《合肥工业大学学报（自然科学版）》2011年第11期1678-1681,1700,共5页Journal of Hefei University of Technology：Natural Science

摘　　要：为了抵御分布式拒绝服务攻击(DDoS),文章提出了从傀儡机和服务器端进行协同防御的机制,对于面向无连接的攻击,主要在傀儡机端进行主动检测防御,对于面向连接的攻击,采用客服协同的SYN Cookie技术,从而主动有效地防御攻击DDoS;仿真测试结果验证了该机制的有效性。To defend against the distributed denial of service（DDoS） attack, a special DDoS defense scheme using the collaboration of puppet machine and servers is proposed. For the connectionless oriented attack, the active detection and defense is mainly conducted on puppet-side. For the connection oriented attack, the technology of SYN Cookie using the collaboration of client and servers is applied. So it can defend against the DDoS attack effectively and initiatively. Simulation results validate the ef- fectiveness of the said scheme.

关 键 词：傀儡机 防御 客服协同 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]