| 基于ISP网络的DDoS攻击防御方法研究 |
| |
| 引用本文： | 蔡明,嵇海进.基于ISP网络的DDoS攻击防御方法研究[J].计算机工程与设计,2008,29(7):1644-1646. |
| |
| 作者姓名： | 蔡明 嵇海进 |
| |
| 作者单位： | 1. 江南大学网络中心,江苏,无锡,214122
2. 江南大学信息工程学院,江苏无锡,214122 |
| |
| 摘 要： | 针对DDoS攻击在ISP网络中的行为特点,提出了一种基于ISP网络的DDoS攻击协作防御方法.该方法从流量信息中构造出攻击会聚树,并根据攻击会聚树找出攻击数据流在ISP网络中的源,在源头对攻击数据流进行控制,从而达到在ISP网络内防御DDoS攻击的目的.该方法克服了在整个网络中防御DDoS攻击耗资巨大的缺点.实验结果表明,该方法能够快速有效了实现对DDoS攻击的防御.
|
| 关 键 词： | DDoS攻击 协作防御 异常检测 统计分析 会聚树 |
| 文章编号： | 1000-7024(2008)07-1644-03 |
| 修稿时间： | 2007年4月5日 |
Research on defence scheme against DDoS attacks based on ISP networks |
| |
| CAI Ming,JI Hai-jin.Research on defence scheme against DDoS attacks based on ISP networks[J].Computer Engineering and Design,2008,29(7):1644-1646. |
| |
| Authors: | CAI Ming JI Hai-jin |
| |
| Affiliation: | CAI Ming1,JI Hai-jin2(1.Computer Network Center,Southern Yangtze University,Wuxi 214122,China,2.School of Information Engineer,China) |
| |
| Abstract: | The characteristic of DDoS attack on ISP networks is discussed and a collaborative defence scheme against DDoS attacks based on ISP networks is presented.The scheme construct attack aggregation tree from the information of traffic.The scheme could find the origin flow from the attack aggregation tree and control it.The scheme could defend DDoS attack based on ISP networks with less cost than on the whole networks.The experimental results show the effectiveness of the scheme in defending the DDoS attacks. |
| |
| Keywords: | DDoS attack collaborative defence abnormity detection statistical analysis aggregation tree |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
