DDoS放大攻击原理及防护

分布式拒绝服务攻击（DDoS）是一种攻击强度大、危害比较严重的网络攻击。 DDoS放大攻击利用放大器对网络流量具有放大作用的技术，向被攻击目标发送大量的网络数据包，造成被攻击的目标网络资源和带宽被耗尽，使得正常的请求无法得到及时有效的响应。简单介绍DDoS放大攻击的原理，分析DDoS放大攻击的防护方法，从攻击源头、放大器、被攻击目标等三个方面采取防护措施，从而达到比较有效的防护效果。

Principle and Protection of DDoS Amplification Attacks

DDoS is an attack strength, more serious harm cyber attacks. DDoS amplification attacks on network traffic using the amplification technology, a large number of network packets sent to the attacked target, causing the target network resources and bandwidth being attacked deplete, making normal requests can not be timely and effective response. Introduces the principle of DDoS amplification attacks, analyzes DDoS protection methods amplification attack, attack the source of protective measures from three amplifiers are targeted, so as to achieve more effective protective effect.