基于生存性的应对拒绝服务攻击的策略

Managing denial of service attacks based on survivability

拒绝服务攻击是大量消耗网络或系统有用资源使用户不能得到正常服务的恶意行为,是一个威胁网络安全的重大问题。生存性是指一个系统在受到攻击、出现错误或发生紧急事件时完成其任务的能力。从生存性角度来设计网络系统可使网络系统在受到攻击时,能积极地应对攻击,尽可能长时间地提供关键服务。

Denial of service (DoS) attacks have been launched against Internet sites for years, which is a significant problem because it can shut an organization off from the Internet. Survivability refers to the capability of a system to complete its mission in a timely manner, even if significant portions are compromised by attack or accident. Designing network system from the sur-vivability could manage the DoS attacks positively, and provide essential services as long as possible in the presence of attacks and failures.