高级检索

    吴庆涛, 张有根, 邵志清. 基于网络连接统计的分布式拒绝服务攻击检测[J]. 华东理工大学学报(自然科学版), 2006, (5): 583-586.
    引用本文: 吴庆涛, 张有根, 邵志清. 基于网络连接统计的分布式拒绝服务攻击检测[J]. 华东理工大学学报(自然科学版), 2006, (5): 583-586.
    WU Qing-tao, ZHANG You-gen, SHAO Zhi-qing. Detecting DDoS Attacks Based on Network Connection Statistics[J]. Journal of East China University of Science and Technology, 2006, (5): 583-586.
    Citation: WU Qing-tao, ZHANG You-gen, SHAO Zhi-qing. Detecting DDoS Attacks Based on Network Connection Statistics[J]. Journal of East China University of Science and Technology, 2006, (5): 583-586.

    基于网络连接统计的分布式拒绝服务攻击检测

    Detecting DDoS Attacks Based on Network Connection Statistics

    • 摘要: 分析了分布式拒绝服务(D istributed D en ial of Serv ice,DDoS)攻击原理及其攻击特征,提出了一种基于网络连接统计的DDoS攻击检测方法。该方法利用DDoS攻击的固有特性,从网络连接数据的统计分析中探寻系统正常行为的特征分布,建立DDoS攻击检测模型。通过模拟攻击实验验证了检测方法的可行性。实验结果表明:该方法能快速有效地实现对DDoS攻击的检测,并对其他网络安全检测研究具有一定的指导意义。

       

      Abstract: Distributed Denial-of-Service(DDoS) attacks are a major threat to availability of computer networks.In this paper,a novel scheme for early detection of DDoS attacks is proposed,which is involved with probability distributions of normal behavior on computer networks and DDoS attacks detection(model).The scheme employed statistical analysis of data from network connections to generate the pro-(bability) distributions of normal network connections.Based on the probability distributions,DDoS attacks detection model is presented.The feasibility of the scheme is validated through the simulated test.The(experimental) results show the effectiveness of our scheme in detecting DDoS attacks.Also,this scheme(provides) some directed sense for other network security detection research.

       

    /

    返回文章
    返回