防御DDoS攻击算法

目前，对商业服务器攻击方式主要有两种，包括拒绝服务（DoS）攻击和分布式拒绝服务（DDoS）攻击。这种攻击类型属于命中一运行类型。DoS／DDoS攻击因为不够灵敏而不能绕过防火墙等防御．即DoS／DDoS攻击向受害主机发送大量看似合法的网络包．从而造成网络阻塞或服务器资源耗尽而导致拒绝服务。虽然数据没有被损坏。但是服务器最终被摧毁．并且还会引发一系列其他的问题．对于一个电子商务服务器．其最重要的为服务器的停机时间。研究对分布式拒绝服务（DDoS）防御原则。

Algorithms of Defense Against DDoS

There exist two courses of attacks that are mostly launched of commercial serves. They include Denim of Service （DOS） attack and Distributed Denial of Service （DDoS） attack. The attack type is of the hit-and-run style, since the payload of a DoS/DDoS attack is not smart enough to by- pass bastions and firewalls. A DoS/DDoS attack sends a road-block of requests to a server, con- fusing the server into thinking that legitimate requests are coming into the server, and overload- ing the server along with its ability to process legitimate requests. Although data is not dam- aged, the server is eventually brought down, which can boil down into a series of other prob- lems, the least of which is downtime for the server if it is an e-Commerce （electronic com- merce） server. Examines the principle of defense against Distributed Denial of Service.