[1]赵英 倪铮.正态分布与分布式拒绝服务攻击的主动预防[J].计算机技术与发展,2006,(12):237-239.
　ZHAO Ying,NI Zheng.Normal Distribution and Active Denial- of-Service Defense Mechanisms[J].,2006,(12):237-239.
点击复制

正态分布与分布式拒绝服务攻击的主动预防()
分享到：

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:
期数:
2006年12期
页码:
237-239
栏目:
安全与防范
出版日期:
1900-01-01

文章信息/Info

Title:
Normal Distribution and Active Denial- of-Service Defense Mechanisms
文章编号:
1673-629X（2006）12-0237-03
作者:
赵英 倪铮
北京化工大学网络中心
Author(s):
ZHAO Ying;  NI Zheng
Network Center, Beijing University of Chemical Technology
关键词:
DDoS; 正态分布; 主动; 安全
Keywords:
DDos;  normal distribution;  active;  security
分类号:
TP393.08
文献标志码:
A
摘要:
随着信息技术的发展和应用的普及，网络安全问题已经成为人们关注的焦点问题。目前分布式拒绝服务（DDos，Distributed Denial of Service）攻击已经成为影响Internet正常运行的一个比较严重的问题，并影响合法用户获得正常的服务。文中首先阐述了DDoS形成的原理，然后分析了预防瞄攻击的措施和机制。随后借助于SSFNet（Scalable Simulation Framework Net）仿真软件构建相应的网络环境，模拟了一种分布式拒绝服务攻击。针对在实验中发现的攻击特征，即攻击发生时通过路由器的新IP数量呈现正态分布的变化趋势，结合统计学中正态分布的概率理论知识，提出了一种通过正态分布模型结合网络中新IP数量变化趋势应对分布式拒绝服务攻击的主动防御方案。然后利用实验中采集的数据，对所提出的应对分布式拒绝服务攻击的防御方案进行了验证
Abstract:
As the development and prevalence of information technology, network security is currently a hot issue in the Intemet. The DDoS is becoming a serious problem to affect the running of the lntemet by preventing legitimate users of a service from using the desired resource. The theory of DDoS is introduced at first in this paper. Then discuss the countermeasures and mechanism of DDoS. Relying on SSFNet simulation software, sets up corresponding network environment, and simulates a DDoS attack. Where.after, regarding remarkable characteristics of the attack found in the experiment, namely the normal distribution trend which is presented by the number of new IP addresses passing the router, and combining with normal distribution probability theory in statistics, it comes up with an active defense scheme against DDoS attack. Subsequently, by taking advantage of collected data and integrating with abnormity detecting method raised from the scheme, it tests the validity of DDos defense scheme

相似文献/References:

[1]尚占锋 章登义.DDoS防御机制研究[J].计算机技术与发展,2008,(01):7.
　SHANG Zhan-feng,ZHANG Deng-yi.Research of DDoS Defense Mechanism[J].,2008,(12):7.
[2]吴姗姗 李俊.基于移动agent的DDoS攻击协同防范技术研究[J].计算机技术与发展,2006,(04):230.
　WU Shan-shan,LI Jun.Cooperative Detection to DDoS Attacks Based on Mobile Agent[J].,2006,(12):230.
[3]罗淇方 钟诚 李智 杨锋 冯艳华.基于合作过滤机制的ICMP回溯DDoS攻击源方法[J].计算机技术与发展,2006,(09):240.
　LUO Oi-fang,ZHONG Cheng,LI Zhi,et al.An ICMP Traceback Method of DDoS Attack Source Based on Cooperative Filtering Mechanism[J].,2006,(12):240.
[4]李道全,张玉霞,魏艳婷.无线传感器网络源位置隐私保护路由协议[J].计算机技术与发展,2019,29(07):88.[doi:10. 3969 / j. issn. 1673-629X. 2019. 07. 018]
　LI Dao-quan,ZHANG Yu-xia,WEI Yan-ting.A Source-location Privacy Protection Routing Protocol for Wireless Sensor Networks[J].,2019,29(12):88.[doi:10. 3969 / j. issn. 1673-629X. 2019. 07. 018]
[5]赵雪阳,岳延奇,王海晨.基于多资源协同优化的虚拟机整合方法[J].计算机技术与发展,2023,33(04):46.[doi:10. 3969 / j. issn. 1673-629X. 2023. 04. 007]
　ZHAO Xue-yang,YUE Yan-qi,WANG Hai-chen.Virtual Machine Consolidation Method Based on Multi-resource Collaborative Optimization[J].,2023,33(12):46.[doi:10. 3969 / j. issn. 1673-629X. 2023. 04. 007]

备注/Memo

备注/Memo:
国家“十五”资助项目（“十五”211CERS-08）赵英（1966-），男，天津人，教授，研究方向为计算机网络、分布式系统
更新日期/Last Update: 1900-01-01