DDoS攻击防御实验床的设计与实现

针对目前分布式拒绝服务(DDoS)的测试与评估需求，设计并实现DDoS攻击防御实验床。该实验床使用真实主机模拟网络环境，具有网络拓扑配置、背景流量和攻击流量产生、数据采集及评估与显示等功能，并提供基于Web的配置和管理界面。实验结果表明，该实验床可为DDoS的攻击与防御系统提供便利的测试与评估环境。

Design and Implementation of DDoS Attack-defense Testbed

According to the requirement of Distributed Denial of Service(DDoS) testing and evaluation, this paper presents the design and implementation of a DDoS attack-defense testbed. This testbed uses real machines to emulate network. It provides background and DDoS attack traffic generation, network topology configuration, data acquisition, evaluation and display ability, and has a configuration and control interface based on Web. Experimental results show that this testbed provides a convenient testing and evaluation environment for DDoS attack- defense systems.