基于网络测量系统的SYNFlooding攻击防御机制  

A Mechanism of Defending SYN Flooding Attack Based on Network Measurement System

作　　者：仇小锋[1] 陈鸣[1] 

机构地区：[1]解放军理工大学指挥自动化学院,南京210007

出　　处：《电子科技大学学报》2004年第3期285-288,共4页Journal of University of Electronic Science and Technology of China

基　　金：国家高技术研究发展计划基金资助项目(2001AA112090)

摘　　要：探索了SYN Flooding攻击的特征,提出了判断攻击发生的关键指标。介绍了网络测量系统的架构,详细阐述了具有服务保护与攻击消除功能的检测方法、攻击源追踪方法。最后分别给出了验证检测机制和追踪机制的实验与结果。In this paper, the characteristics of SYN flooding attack are explored, some key metrics of judging this kind of attack are proposed. Thereafter, an introduction of the architecture of network measurement system is introduced. Then the detecting method with the features of service-protected and attack-removed, the method of tracing the source of attack are expatiated in detail. Finally, the experiments for validating the mechanisms of detecting and tracing attacks are given.

关 键 词：拒绝服务 SYN Flooding攻击 网络测量 地址追踪 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]