基于PROBE的DDOS攻击检测分析  

Analysis of DDOS attack detection based on PROBE

作　　者：赵俊峰 夏元轶 

机构地区：[1]国网江苏省电力公司信息通信分公司,210024

出　　处：《电子测试》2017年第1期40-40,43,共2页Electronic Test

摘　　要：分布式拒绝服务(DDOS)攻击是目前严重威胁网络安全和影响网站服务质量的一种攻击手段DDOS攻击就是利用多个分布式攻击源向攻击对象发送超出攻击目标处理能力的海量数据包,来消耗可用系统和带宽资源,从而导致网络服务瘫痪的一种攻击。目前有很多方法检测和防御DDOS攻击,传统的检测和防范措施是基于特征匹配的检测往往要求有一定的先验知识难以区分突发正常流量与DDOS攻击。本文通过介绍PROBE技术来检测应对DDOS攻击,并探究了PROBE在DDOS攻击检测中的应用策略。Distributed Denial of Service（DDOS） attack is a serious threat to network security and the impact of the quality of Web services an attack means DDOS attack is the use of multiple distributed attack source to attack the target object to send beyond the massive processing capacity of the target packet to consume Available systems and bandwidth resources, resulting in an attack of network services paralyzed. There are many methods to detect and defend against DDOS attacks. Traditional detection and prevention measures are based on the feature matching detection, which often requires some prior knowledge to distinguish between burst normal traffic and DDOS attacks. So far there is no effective way to distinguish DDOS attacks Flow and normal burst flow, therefore, detection and defense DDOS attack is still a difficult task. And the distinction between DDOS attack flow and the normal burst flow is the key to the problem. In this paper, PROBE is introduced to detect DDOS attacks, and the application of PROBE in DDOS attack detection is explored.

关 键 词：DDOS攻击检测 特征匹配 分布式攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]