| 对一种DoS攻击的分析及防范策略研究 |
| |
| 引用本文： | 梁皓鸣,刘小林,张公民.对一种DoS攻击的分析及防范策略研究[J].计算机安全,2009(6):44-46. |
| |
| 作者姓名： | 梁皓鸣 刘小林 张公民 |
| |
| 作者单位： | 1. 68011部队,甘肃,兰州,730020
2. 电子工程学院,安徽,合肥,230037 |
| |
| 摘 要： | Web服务器常常遭到来自外部网络主机的拒绝服务攻击，其中，SYN flood攻击是最常见的一种。攻击者使用伪造的源地址向服务器发送大量的TCP连接请求，致使服务器为每一个连接请求分配资源直至资源耗尽，因此，合法用户的正常访问也因为无法建立TCP连接而被拒绝。分析了SYN flood攻击的基本原理，对现有的几种处理资源耗尽及伪造源地址的方法进行了分析，指出了它们的优缺点。
|
| 关 键 词： | SYN flood 防火墙 SYN Cookie 主动网络 |
The Study of Analysis and Prevention Strategy to A Type of DoS Attack |
| |
| LIANG Hao-ming,LIU Xiao-lin,ZHANG Gong-min.The Study of Analysis and Prevention Strategy to A Type of DoS Attack[J].Network & Computer Security,2009(6):44-46. |
| |
| Authors: | LIANG Hao-ming LIU Xiao-lin ZHANG Gong-min |
| |
| Affiliation: | 1.68011army;LanZhou;Gansu 730020;China;2.Electronic Engineering Institute;Hefei;Anhui 230037;China |
| |
| Abstract: | The Web Servers are offen subject to the denial of service attacks from the outsideNetworks, SYN flood attack is the most common kind. An attacker send a large number of TCP connection requests to the server with forged source address ,so the server allocates Resources for each link until the depletion of resources. At last, the legitimate users can not visit the server because they can not establish a TCP connection.This paper firstly analyzes the basic theory of SYN flood attacks ,then discuss several exi... |
| |
| Keywords: | SYN flood Firewall SYN Cookie Active networks |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
