基于相似系数的DDOS攻击检测研究  

RESEARCH ON SIMILARITY COEFFICIENT-BASED DDOS ATTACK DETECTION

作　　者：翟光群[1] 齐鹏辉[1] 

机构地区：[1]郑州大学信息工程学院,河南郑州450001

出　　处：《计算机应用与软件》2015年第3期289-292,共4页Computer Applications and Software

基　　金：河南省重点科技攻关项目(0423020300)

摘　　要：针对服务器的DDOS攻击,在分析流量基础上,提出一种利用相似系数检测DDOS攻击的算法。该算法以单位时间的数据量作为计算项,统计实验数据值,通过与阈值的比较检测DDOS攻击。此算法具有在线检测、实时性强的特点,对插入式DDOS攻击检测尤其有效。实验表明,在阈值参数取值适当的情况下,DDOS攻击的检测准确率有较高的提升。For the DDOS attacks against servers,we propose an algorithm to detect DDOS attack by using similarity coefficient based on traffic analysis. This algorithm takes the data traffic per unit time as the calculating items and detects DDOS attack by comparing the statistical values of experimental data with the threshold values. The algorithm has the features of online detection and high real time performance. In addition,it is especially effective for the plug-in DDOS attack detection. Experiments show that the accuracy of DDOS attack detection has better improvement when the threshold parameters are properly selected.

关 键 词：分布式拒绝服务 流量相似性 相似系数 服务器DDOS攻击 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]