基于蜜罐的CC攻击防护体系  

Protection System of CC Attack based on Honeypot

作　　者：李硕[1] 张权[1] 

机构地区：[1]国防科技大学电子科学与工程学院,湖南长沙410073

出　　处：《信息安全与通信保密》2015年第9期99-102,共4页Information Security and Communications Privacy

摘　　要：近年来,互联网上流行一种应用层DDo S攻击——CC攻击。CC攻击的危害很大:轻则导致页面无法访问,重则导致整个服务器瘫痪。目前针对CC攻击的防护一般采用基于网站代码优化的检测方法,然而这种方法会导致服务器在遭到CC攻击时消耗部分主机资源。在传统入侵防御系统基础上,添加一个建立与真实系统相似的蜜罐主机,从而保证受保护主机在提供正常服务的同时免受CC攻击。In recent years, DDoS on the application layer,that is, CC attack, has beeome inereasingly popular on the Internet, and this attack would result in the failure of web page response or even the paralysis of whole server. Now the detection based on the optimization of website code is usually adopted for the proteetion of CC attack. This method, however, may lead to resourc, e consumption of the host server during the CC attack. By adding a highly interactive honeypot to the traditional intrusion prevention system, the server can be effectively prevented from CC attack.

关 键 词：CC攻击 蜜罐 入侵防御系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]