| Web服务中基于流量监控的DDoS攻击防范机制 |
| |
| 引用本文： | 王秀利. Web服务中基于流量监控的DDoS攻击防范机制[J]. 计算机工程与应用, 2008, 44(36): 115-118. DOI: 10.3778/j.issn.1002-8331.2008.36.032 |
| |
| 作者姓名： | 王秀利 |
| |
| 作者单位： | 中央财经大学,信息学院,北京,100081 |
| |
| 基金项目： | 中央财经大学中财121人才工程青年博士发展基金 |
| |
| 摘 要： | 提出一种基于流量监控的针对Web服务的DDoS攻击防范机制。使用Linux内核的安全选项、Linux虚拟服务器、iptables防火墙以及基于类的排队等技术搭建防范DDoS攻击的Web服务器系统环境，设计、实现了流量监控器和分析工具来检测可能发生的DDoS攻击，并降低其危害。实际测试表明，该机制能有效检测和防范常见的针对Web服务的DDoS攻击。
|
| 关 键 词： | 分布式拒绝服务攻击 流量监控 负载均衡 基于类的排队 Web服务 |
| 收稿时间： | 2008-04-30 |
| 修稿时间： | 2008-6-23 |
Defense mechanism against DDoS attacks aiming at Web service based on traffic monitor |
| |
| WANG Xiu-li. Defense mechanism against DDoS attacks aiming at Web service based on traffic monitor[J]. Computer Engineering and Applications, 2008, 44(36): 115-118. DOI: 10.3778/j.issn.1002-8331.2008.36.032 |
| |
| Authors: | WANG Xiu-li |
| |
| Affiliation: | School of Information，Central University of Finance and Economics，Beijing 100081，China |
| |
| Abstract: | A defense mechanism against DDoS attacks aiming at Web service based on traffic monitor is proposed.Using the Linux kernel security options,Linux virtual server,iptables firewall and class-based queuing to set up Web server environment, this paper designs and implements traffic monitor and analysis tools to detect possible DDoS attacks and defend against them.The experiment results reveal that this mechanism can effectively detect and defend common DDoS attacks aiming at Web service. |
| |
| Keywords: | Distributed Denial of Service(DDoS) traffic monitor load balancer class-based queuing Web service |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与应用》浏览原始摘要信息 |
|
点击此处可从《计算机工程与应用》下载免费的PDF全文 |
