浅析DDoS攻击和防范

Discussion on DDoS attacks and prevent

DDoS的英文缩写是Distributed Denial of Service,即"分布式拒绝服务"。DDoS的攻击通过很多"僵尸主机"(被攻击者入侵过或可间接利用的主机)向受害主机发送大量看似合法的网络包,从而造成网络阻塞或服务器资源耗尽而导致拒绝服务。本文介绍了DDoS攻击原理、攻击形式、检测方法和防范措施。

DDoS is the English abbreviation for Distributed Denial of Service,that is, ＂distributed denial of service.＂ DDoS attacks through many ＂zombie hosts＂ （by an attacker to have or indirect use of mainframe） to the victims of mainframe send a large quantity of seemingly legitimate network packets, resulting in obstruction or network server resource depletion caused by denial of service. This paper introduces the principle of DDoS attack, attack form, detection methods and prevention measures.