一种抵御HTTP洪水攻击的方法  

A METHOD AGAINST HTTP FLOODS

作　　者：袁志[1] 

机构地区：[1]广州大学华软软件学院,广东广州510990

出　　处：《计算机应用与软件》2012年第7期271-273,共3页Computer Applications and Software

摘　　要：HTTP洪水攻击在消耗网站服务器资源的同时威胁到信息安全。提出一种抵御方法,通过URL重写使Web日志记录客户端的CookieId和SessionId,用于识别请求者;定时分析Web日志,根据请求时间特征来识别傀儡主机;用自定义HTTP模块对请求进行预处理,拦截傀儡主机的请求。该方法成本低、便于实施,实践证明了其有效性。HTTP floods not only consume web server resources but also threaten its information security. The paper proposes a resistance method：rewriting URL to record clients＇ CookieId and SessionId in Web logs to identify askers ; regularly analyzing Web logs to identify puppet hosts by request time characteristics; and pre-processing requests by user-defined HTTP module to keep out requests from puppet hosts. Being cheap and easy to implement, the method is validated by practice.

关 键 词：分布式拒绝服务攻击 HTTP泛洪 网站安全 WEB日志分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]