基于云计算平台的防御拒绝服务攻击方法  

Defense Strategy of Denial of Service Attacks Based on Cloud Computing Platform

作　　者：韩志杰[1] 段晓阳[1] 

机构地区：[1]河南大学计算机与信息工程学院,开封475004

出　　处：《信息化研究》2011年第5期67-70,共4页INFORMATIZATION RESEARCH

基　　金：中国博士后科学基金面上资助第48批一等资助(20100480048);河南省科技攻关项目基金(072102210044;102102210489)

摘　　要：随着企业的关键核心数据及服务从企业网迁移到了云服务中心,更多的应用和集成业务开始依靠互联网,拒绝服务带来的后果和破坏将会明显地超过传统的企业网环境。在云计算环境下,具体的应用成为攻击目标,攻击者会使用针对具体应用的攻击方法来攻击受害者的在线服务。文章提出了一种基于云计算平台的处理拒绝服务攻击的策略,主要解决了在云计算平台上对具体应用进行HTTP拒绝服务攻击的问题。通过该策略,能够在即使黑客伪装为合法用户后仍然能够防御拒绝服务攻击。Recently, the cloud computing became more and more popular for its high-performance computing, high availability, low cost. As the key core data and services of the enterprise migrated from enterprise network to the center of the cloud service, more applications and integration business started to rely on the Internet, so the conse- quences and damage of denial of service will be significantly more than the traditional enterprise network environment. In the cloud computing environment, the attacker will attack the victim＇s online services by targeting the specific applica- tion. The paper proposed the treatment strategy of denial of service attacks based on a cloud computing platform, mainly to solve specific application on the HTTP denial of service attacks. Through this strategy, even if the attacker can pre- tend to be legitimate users, it will be still able to defensive denial of service attacks.

关 键 词：云计算 拒绝服务 防御策略 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]