路由器防范拒绝服务攻击技术研究

A Study on the Protection Techniques of Routers against Denial of Service Attacks

拒绝服务攻击给网络安全带来了巨大的威胁,防范DDoS攻击一直是安全领域的一个重要课题。介绍了路由器防范拒绝服务攻击的技术,包括IP路径重构技术、在源端防范DDoS策略、防范IP地址欺骗的机制和基于拥塞控制的方法,指出了进一步的研究方向。

Denial of service attacks have brought tremendous threat to the networks so that defeating DDoS attacks has been a key issue in the security field. This paper introduces the protection techniques of routers against DDoS attacks and classifies them into four, including the technique of IP traceback, the policy of defeating DDoS at the source, the scheme of defeating IP address spoofing and the method of congestion control, Finally further research directions are also included