| 防御DDoS攻击的智能过滤模型 |
| |
| 引用本文： | 李萱,叶琪.防御DDoS攻击的智能过滤模型[J].计算机工程与应用,2005,41(29):156-158,166. |
| |
| 作者姓名： | 李萱 叶琪 |
| |
| 作者单位： | 武汉大学计算机学院,武汉,430079;武汉大学计算机学院,武汉,430079 |
| |
| 摘 要： | 拒绝服务攻击(DoS)和分布式拒绝服务攻击(DDoS)已经成为网络最大的安全威胁之一,如何防御DDoS攻击已经引起了人们的广泛关注,然而关于在DDoS攻击发生时减轻攻击危害的这方面工作却很少。阐述了一种基于IP返回追踪的数据包智能过滤模型,能够在DDoS攻击正在发生时尽可能响应合法用户的请求,提高合法通信的吞吐量。
|
| 关 键 词： | 分布式拒绝服务攻击 IP返回跟踪 数据包标记 数据包过滤 智能 |
| 文章编号： | 1002-8331-（2005）29-0156-03 |
| 收稿时间： | 2005-01 |
| 修稿时间： | 2005-01 |
Intelligent Packet Filtering Model for Defending against DDoS Attacks |
| |
| Li Xuan,Ye Qi.Intelligent Packet Filtering Model for Defending against DDoS Attacks[J].Computer Engineering and Applications,2005,41(29):156-158,166. |
| |
| Authors: | Li Xuan Ye Qi |
| |
| Affiliation: | School of Computer Science,Wuhan University,Wuhan 430079 |
| |
| Abstract: | The attack of Denial of Service(DoS) and Distributed Denial of Service(DDoS) has become one of the most harmful problems in network security,and much attention is given to the defense against it now,yet little work has been done on the mitigation of the harm while the attack is taking place.This paper describes an intelligent model of packet filtering,based on IP traceback,which is able to respond to legitimate users' request to the greatest extent and improve the throughput of the legitimate traffic,while the attack is raging on. |
| |
| Keywords: | DDoS IP traceback packet marking packet filtering intelligence |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
