|
|||||
|
|
| 一种防御SYN Flood的自适应阈值状态模型 | |
| 引用本文： | 刘群华,马进,夏正敏. 一种防御SYN Flood的自适应阈值状态模型[J]. 信息安全与通信保密, 2010, 0(4): 84-86 |
| 作者姓名： | 刘群华 马进 夏正敏 |
| 作者单位： | 上海市信息安全综合管理技术研究重点实验室,上海,200240 |
| 基金项目： | 国家自然科学基金资助项目，国家高技术研究发展计划(863)资助项目 |
| 摘 要： | SYN Flood攻击可在短时间内发送大量的SYN数据包给防火墙，造成状态检测防火墙的状态表溢出，使其无法响应合法请求，从而导致整个网络的系统性能下降。在防御SYN Flood攻击的状态检测模型的基础上，提出一种自适应阈值状态检测模型。它利用自适应阈值算法对流量进行预处理，保障防火墙在高强度攻击下的自身安全。实验表明，该模型能有效抵御SYN Flood对内网主机的攻击，同时在一定程度上提高了状态检测防火墙自身防御的能力。 |
| 关 键 词： | 自适应阈值算法 SYN Flood攻击 状态检测 防火墙 |
A Stateful Inspection Model Based on Adaptive Threshold Algorithm for Defense of SYN Flood Attacks |
|
| LIU Qun-hua,MA Jin,XIA Zheng-min. A Stateful Inspection Model Based on Adaptive Threshold Algorithm for Defense of SYN Flood Attacks[J]. China Information Security, 2010, 0(4): 84-86 | |
| Authors: | LIU Qun-hua MA Jin XIA Zheng-min |
| Affiliation: | LIU Qun-hua,MA Jin,XIA Zheng-min (Shanghai Municipal Key Lab of Integrated Management Technology for Information Security,Shanghai 200240 China) |
| Abstract: | SYN FFlood attacks send large numbers of SYN packets to firewall in a short time, thus causing the iptables of state inspection firewall to overflow and eventually to downgrade the performance of the entire network system. Based on the architecture for state inspection model against SYN Flood attacks, this paper presents a new state inspection model based on adaptive threshold algorithm, which could automatically start the adaptive threshold algorithm to pre-treat the flow and thus to protect the security o... |
| Keywords: | adaptive threshold algorithm SYN FFlood attack state inspection firewall |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ | |