基于主机防御DOS攻击的算法及其实现

如何防御DOS攻击是网络安全中一个重要的方向。文章从防止DOS攻击的算法入手,提出了一种基于状态转换和信任度的主机防御DOS攻击算法。该算法通过记录每个连接的状态及信任度,判断进入主机的IP数据包是否为攻击包,从而阻止或通过该IP包。试验测试证明,该算法能在保证正常的网络通讯和计算机操作的同时,抵御多种DOS攻击。

The Implementation of New Algorithmic about Defense DOS Attack

For network security,it is important to defend from DOS attack.This paper proposes an algorithm based on state transfer and creditability.The algorithm records state and calculates the creditability of every connection.From the results of calculation,the algorithm can judge the connection's legitimacy.Authors test it under linux8.0,the CPU usage can be hold below70%when under attacking(the attack tools that used include SYN flooding,smurf flooding,TFN2K,SYN flood,ICMP flooding,etc).According to upon,this algorithm can defend lots DOS attack efficiently.