摘要
针对应用层DDoS(application layer DDoS,App-DDoS)攻击行为的特点,提出了一种基于可信度的App-DDoS攻击防御方法。该方法从服务请求的速率和负载两个方面,统计分析正常用户的数据分布规律,并以此作为确定会话可信度的依据。调度策略再根据会话可信度实现对攻击的防御。最后,通过模拟攻击实验验证了防御方法的有效性。实验结果证明了该方法能够快速有效地实现对App-DDoS攻击的防御。
The characteristic of attack behavior is discussed and a defence scheme for application layer DDoS （App-DDoS） attack defending is presented based on credit probability. The scheme emploied statistical analysis of data from normal users to find the probability distributions of data of normal behavior, utilizing rate and workload of request data. The probability distributions are the evidence for setting credit probability ofsessions. Thescheduling policies realized the defence of attacks based on credit probability of sessions. Also, the feasibility of the scheme is validated through the simulated test. The experimental results show the effectiveness of the scheme in defending the App-DDoS attacks.
出处
《计算机工程与设计》
CSCD
北大核心
2007年第19期4619-4621,4636,共4页
Computer Engineering and Design
