Web服务器上应用层DDoS检测方法的改进  

Detection Improvement of Application-layer DDoS on Web Server

作　　者：徐琳[1] 王轶俊[1] 薛质[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《信息安全与通信保密》2013年第2期63-65,共3页Information Security and Communications Privacy

基　　金：国家自然科学基金资助项目(批准号:61171173)

摘　　要：随着互联网越来越普及,它的弱点也被攻击者们越来越多地加以利用并攻击,由此造成了很大的损失。DDoS攻击是一个危害非常大的攻击方式,传统上的基于网络层的DDoS攻击方式由于技术的进步已经在很大程度上得到了抑制。现在,更多的DDoS攻击发生在应用层。尽管已经有了很多的检测方法,但是这种攻击在现阶段来说并没有得到根本的解决。文章将解释应用层DDoS攻击的原理及常见手段,并归纳总结现阶段主要的防御方法。最后针对这些方法中的不足提出了一种改进措施。With the development of the Internet, more attackers utilize and attack the weak points of network, this often results in various damages. As far as the network is concerned, DDoS is always a very dangerous way, while the traditional DDoS attack on the network layer is restrained owing to the technical advances. Nowadays, more DDoS attacks occur on the application layer, and although there exist many detect methods, the application DDoS attack is not radically resolved. This article discusses the discipline and measures of application DDoS attack, summarizes the principal defending methods at present. Finally for the shortcomings of these methods, some improvements are proposed

关 键 词：互联网 应用层 DDOS攻击 检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]