摘要
针对Do S/DDo S的攻击检测算法大多应用于攻击的目的端,只能实现检测效果、并不能缓解攻击的问题,提出利用SDN架构的集中控制等特点,在攻击的源头实现流量实时监控,使用源IP防伪、接入层异常检测、链路流量异常检测形成多重防御体系,尽可能早地发现攻击,逐渐过滤异常流量,实现网络层DDo S攻击在源端的检测和防御。提出防御体系概念,便于应用更先进的检测算法完善防御体系。
Most of current DoS/DDoS attack detection algorithms apply to the destination of attack, which only perform detection rather than mitigation. In this paper, we proposed a multi-level defense system which performs real-time traffic monitoring at the source of attack leveraging centralized control of SDN architecture. Combining methods of antilP spoofing, access layertraffic detec- tion and link traffic detection, our system achieves early detection of attack, filters anomaly traffic gradually, thus detects and miti- gates network layer DDoS attack at the source. Furthermore, we proposed the defense architecture concept, which helps to improve our defense system with more advanced algorithms in future.
出处
《电子技术应用》
北大核心
2015年第12期113-115,119,共4页
Application of Electronic Technique
关键词
软件定义网络
拒绝服务攻击
异常流量检测
防御体系
software defined network
distributed denial of service
traffic anomaly detection
defense system
