一种改进的DRDoS检测算法

分布式拒绝服务攻击DDoS是互联网环境下最具有破坏力的一种攻击方式。检测并防御这种攻击是解决网络安全领域的重要课题。针对DRDoS的特性,采用了一种改进的DRDoS检测算法——T&A算法。DDoS攻击的预防解决了现有不同特定网络服务技术检测的不足的问题,提出了基于行为异常的方法进行检测的改进方案。通过模拟攻击实验证明,该算法不仅提升了检测率、降低了误报率,而且对资源的占用较少,具有较好预警功能。

An improved DRDoS detection algorithm

Distributed denial of service attack DDoS is the most destructive attack in the Internet environment,detecting and defending against such attack is an important issue in the field of network security.With characteristics of DRDoS,uses an improved DRDoS detection algorithm-T & A algorithm.DDoS attack prevention Solving the problem of abnormal behavior-based approaching on insufficient detection of the different specific network services,improving the detection.The simulated attack experiments demonstrate that the algorithm not only enhances the detection rate and reduce the false alarm rate,but also uses less resources,with better early warning function.