一种新的分布式拒绝服务攻击检测方法

检测分布式拒绝服务(Di stributed Denial-of-Service,DDoS)攻击,需要将攻击流与正常流区分开来,特别是与繁忙业务流区分.检测方法需要高效的实现,使在线实时监测成为可能.在研究DDoS攻击对网络流量自相似性影响,加之对攻击流包特征分析的基础上,采用了一种联合小波分析与特征分析的检测DDoS攻击的方法.实验表明,这种新型检测方法比传统的检测方法准确.

A New Method for Detecting Distributed Denial-of-Service Attack

The detection of Distributed Denial of Service attack needs distinguishing attack flows from normal flows, especially from busy flows. An effective method must be realized in order to enable the on-line detection. A combined method is adopted based on the research of the influence by DDoS attack on various self-similar network traffics and the analysis characters of attack flow packets. The experimental results show that the proposed method is more accurate than traditional methods.