| 分布式拒绝服务攻击手段及其防范技术研究 |
| |
| 引用本文： | 严毅 宁葵 李陶深. 分布式拒绝服务攻击手段及其防范技术研究[J]. 微机发展, 2004, 14(9): 81-83,86 |
| |
| 作者姓名： | 严毅 宁葵 李陶深 |
| |
| 作者单位： | [1]广西大学计算机与信息工程学院，广西南宁530004 [2]广西大学外国语学院，广西南宁530004 |
| |
| 基金项目： | 广西科技攻关项目(桂科攻033008-9) |
| |
| 摘 要： | 分布式拒绝服务(DDoS)的攻击严重威胁着互联网的安全。文章通过对DDoS攻击原理以及DDoS攻击行为的分析，针对其攻击手段以及攻击工具的特征，提出了切实可行的检测方法和防御手段，以减轻攻击所产生的影响。在深入剖析现阶段DDoS攻击的防护手段、策略的基础上，给出一个DDoS攻击预警及入侵防御系统(IPS)的体系结构，该体系结构从主动防御的技术角度出发，同时提出用硬件技术实现设备的高性能来抵抗DDoS攻击的目的。
|
| 关 键 词： | 分布式拒绝服务 DDoS 互联网安全 攻击原理 入侵防御系统 IPS 体系结构 攻击行为分析 |
| 文章编号： | 1005-3751(2004)09-0081-03 |
Study on Attack Means and Protecting Skills of DDoS |
| |
| YAN Yi,NING Kui,LI Tao-shen. Study on Attack Means and Protecting Skills of DDoS[J]. Microcomputer Development, 2004, 14(9): 81-83,86 |
| |
| Authors: | YAN Yi NING Kui LI Tao-shen |
| |
| Affiliation: | YAN Yi~1,NING Kui~2,LI Tao-shen~1 |
| |
| Abstract: | The attack of DDoS is a severe thread to the safety of the Internet.This thesis analyses the attacking rules and behaviour of DDoS.According to attacking means of DDoS and the features of its attacking tools,this thesis suggests some feasible and practical test methods and defensive ways so as to lessen the effect of its attack.Based on the further analysis on the present protective ways and strategies against the attack of DDoS,this thesis puts forward IPS system structure against DDoS attack.IPS system structure starts from the technical perspective of active defence and aims at defending DDoS attack by upgrading the high performances of equipment with the help of hardware technology. |
| |
| Keywords: | DDoS attack port IPS |
| 本文献已被 CNKI 维普 等数据库收录！ |
