高速网络下的DDoS检测被引量：1

DDoS Detection in High Speed Network

下载PDF

导出

摘要分布式拒绝服务(DDoS)攻击是长期困扰网络安全领域的问题之一。特别是高速网络下,检测系统需要处理大量的数据,其检测策略和系统处理能力直接影响到DDoS检测的准确率和响应速度。该文提出了在高速网络下的DDoS检测系统DDES(DDoSDetectionSystem)。DDES在协议分析的基础上,对处于危险状态的连接进行统计分析;它采用分布式的结构,多个探测子节点协同分析处理以提高处理性能;同时配合网络边缘设备对攻击源实施阻断。 DDoS attack is one of the problems in the network security. Especially in high speed network, detection system has much more data to process. The detection strategy which is taken and the system processing ability effect the rate and response speed of DDoS detection directly. This paper proposes the DDoS detection system （DDES） in high speed network basing protocol analysis; DDES statistically analyzes the connection in danger state, DDES uses the distributed framework, many probes cooperate to analyze and process in order to enhance processing performance, Also, DDES can interdict the attack sources working in network edge service in the same time.

作者蔡玮珺仲海骏

机构地区南京大学计算机科学与技术系南京大学软件新技术国家重点实验室

出处《计算机工程》 EI CAS CSCD 北大核心 2006年第10期154-156,共3页 Computer Engineering

基金国家"863"计划基金资助项目"智能入侵检测与攻击预警系统"(2001AA142010)

关键词 DDOS攻击高速网络入侵检测 DDoS attack High speed network IDS

分类号 TP393.08 [自动化与计算机技术—计算机应用技术]

引文网络
相关文献

参考文献6

1Kevin H,Weaver G.Trends in Denial of Service Attack Technology[DB/OL].http://www.cert.org/archive/pdf/DoS_trends.pdf,2001-10.
2Baras J S,Cardenas A A,Ramezani V.On-line Detection of Distributed Attacks from Space-time Network Flow Patterns[C].Proceedings of the 23rd Army Science Conference,2002-12.
3Mahajan R,Bellovin S M,Floyd S,et al.Controlling High Bandwidth Aggregates in the Network(Extended Version)[DB/OL].http:www.aciri.org/pushback/,2001.
4ISS.BlackICE Sentry Gigabit[DB/OL].http://www.networkice.com/products/sentry_gigabit,2001.
5Kruegel C,Valeur F,Vigna G,et al.Stateful Intrusion Detection for High-speed Networks[C].Proceedings of the 2002 IEEE Symposium on Security and Privacy,2002.
6Cohen F.Simulating Cyber Attacks,Defenses and Consequences[DB/OL].http://all.net/journal/ntb/simulate/simulate.heml,1999.