DDoS攻击原理及其防御机制的研究

DDoS攻击是一种被黑客广泛应用的攻击方式,它以破坏计算机系统或网络的可用性为目标,危害性极大。本文首先介绍了DDoS攻击的攻击原理,接着从DDoS攻击的攻击手段和攻击方式两个方面对DoS攻击进行分类介绍,然后针对DDoS攻击的方式,提出了一种检测和防御DDoS攻击的模型,最后利用入侵检测技术和数据包过滤技术,设计了一个针对DDoS攻击的检测与防御系统,该系统具有配置简单、易于扩展、实用性较强等优点。

Study on DDoS Attacks and Defense Mechanisms

DDoS attack is a widely-used attack mode by hacker.It takes the availability of computer system and network as the target and is of great danger.This paper first gives the principle of DDoS attack,and then,from means and mode of attack,classifies the DoS attack.Based on this,a model of DDoS detection and defense is proposed.Finally,by using intrusion detection and packet filtering,a system of DDoS detection and defense is designed,which is simple in deployment,easy in expansion,and strong in practicability.