基于路由器的TCP连接监控技术的分析与实现

Analysis and realization of TCP connection monitoring technology based on router

拒绝服务攻击占用路由器和带宽的资源,导致网络和设备过载,是目前网络安全最主要的威胁之一。文章针对TCP-SYN flood这一"洪泛攻击",分析了目前主流的防范方法,提出了基于路由器的TCP连接监控技术,并在实验网环境下加以实践和验证。

Denial of service attack occupies the resources of routers and bandwidth, leads to the overloading of network and equipment and is one of the leading threats of the network security. Aiming at TCP-SYN flood, this paper analyzes the main guard methods, puts forward the TCP connection monitoring technology based on routers and practices and verifies it under the experimental network environment.