一种基于流量控制技术的分布式DDOS攻击检测框架研究

ON FRAMEWORK OF DISTRIBUTED DDOS ATTACK DETECTION BASED ON FLOW CONTROL TECHNIQUE

DDOS攻击是当前网络安全的最大威胁之一。将分布式检测技术与流量控制技术相结合提出了一种D&SFC(Distributed and Simple Flow Control)DDOS攻击检测框架,即具有简单流量控制功能的分布式DDOS检测框架。其特点是利用多层次的结构,结合包过滤及带宽控制技术,在网络拓扑的不同节点上实现网络流量的简单控制,在进行DDOS攻击检测的同时降低了攻击数据包对网络性能的影响。

DDOS attack has became one of the rigorous network security threats. The paper introduces a D＆SFC （ Distributed and Simple Flow Control） DDOS attack detection framework on the combination of distributed detection and flow control techniques, to make the distributed DDOS detection framework with simple flow control function. By using multiple layer structure, packet filtering and bandwidth controlling techniques as its specialities, the framework realized simple network flow control at different points in net topology. When detecting DDOS attacks it decreased the impacts of attack packets on network performance.