| 摘要: |
| 分布式拒绝服务(distributed denial of service,简称DDoS)攻击是当今互联网的重要威胁之一.基于攻击包所处网络层次,将DDoS 攻击分为网络层DDoS 攻击和应用层DDoS 攻击,介绍了两类攻击的各种检测和控制方法,比较了处于不同部署位置控制方法的优劣.最后分析了现有检测和控制方法应对DDoS 攻击的不足,并提出了DDoS 过滤系统的未来发展趋势和相关技术难点. |
| 关键词: DDoS 检测 控制 |
| DOI：10.3724/SP.J.1001.2012.04237 |
| 分类号: |
| 基金项目:国家自然科学基金(61070185); 国家高技术研究发展计划(863)(2007AA010501, 2009AA01Z431) |
|
| DDoS Attacks Detection and Control Mechanisms |
|
ZHANG Yong-Zheng1, XIAO Jun1, YUN Xiao-Chun1, WANG Feng-Yu2
|
|
1.Institute of Information Engineering, The Chinese Academy of Sciences, Beijing 100029, China;2.School of Computer Science and Technology, Shandong University, Ji’nan 250101, China
|
| Abstract: |
| The Distributed denial of service (DDoS) attack is a major threat to the current network. Based on the attack packet level, the study divides DDoS attacks into network-level DDoS attacks and application-level DDoS attacks. Next, the study analyzes the detection and control methods of these two kinds of DDoS attacks in detail, and it also analyzes the drawbacks of different control methods implemented in different network positions. Finally, the study analyzes the drawbacks of the current detection and control methods, the development trend of the DDoS filter system, and corresponding technological challenges are also proposed. |
| Key words: DDoS detection control |
