三网融合下城域网DDoS攻击的监测及防范技术研究

随着三网融合的推进及光接入网的发展，用户接入带宽数量逐步增大，城域网中大流量的DDoS攻击越来越多，监测及防范DDoS攻击对于全业务承载下城域网的安全运行有着重要的意义。文章从运维的角度对运营商城域网中常见的DDoS网络攻击的监测、防范技术进行了探讨，阐述了各种DDoS监测方法及其应用场景，剖析了城域网中各网络层面的DDoS攻击防范部署策略。

Research of Metropolitan DDoS Attacks Detection and Defense Technologies in Triple Play

With the advance of the triple play and the development of optical access network, access bandwidth of users increased gradually, heavy traffic of DDoS attacks in metropolitan area network become more and more, How to detect and defense DDoS attacks is very important for safe operation of metropolitan area network in full service carrying environment. In this paper, from point view of operation and maintenance common DDoS attacks detecting, defense techniques are discussed to explain the various DDoS detection method and its application scenarios, and the deployment of DDoS attacks defense strategy in metropolitan area network level.