基于代理服务器的分布式拒绝服务攻击系统设计与实现  

Distributed Denial of Service Attack Research Based on Proxy Servers

作　　者：王硕[1] 赵荣彩[1] 颜峻 单征[1] 

机构地区：[1]信息工程大学信息工程学院,河南郑州450002 [2]信息工程大学科研部,河南郑州450001

出　　处：《信息工程大学学报》2012年第3期365-369,共5页Journal of Information Engineering University

基　　金：国家重点实验室开放课题(ICT-ARCH200906)

摘　　要：传统针对Web服务器的拒绝服务攻击手段存在攻击组织形式不合理、流量特征明显等不足。SYN Cookies等安全措施的采用已能够有效管理监测服务器的运行状态。提出了一种基于代理服务器的分布式拒绝服务(Distributed Denial of Service,DDoS)攻击方式,通过代理服务器与目标Web服务器构建会话并提交服务请求,消耗Web服务器系统资源,并侵占其半连接队列。实验验证这种攻击方式具备良好的攻击效果,且流量的数字特征与正常网络流量差异极小,具备较高的攻击行为隐蔽性。Denial of Service （DoS） attacks against the web server have many deficiencies such as unreasonable attack organization and obvious network traffic characteristics. Security measures such as SYN cookies are capable of effective server monitoring to defend against those attacks. This paper proposes a distributed denial of service attack technique based on proxy server. Sessions are built between the proxy server and the targeted web server, with service requests submitted to the web server. So the web server resources are consumed. Experiments indicate this techique performs well, with few anomalies in network traffic, which means good concealment.

关 键 词：WEB服务器 拒绝服务攻击 代理服务器 半连接队列 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]