摘要
分析了DoS攻击机理,基于网络流量的自相似性提出了一种DDoS防范模型。首先采用小波方法计算流量的Hurst参数,判断是否遭受DoS攻击。当认为受到攻击后,结合连接信任域来进行响应。实验表明,该模型可以检测到强、弱DoS攻击;在受到DDoS攻击后,仍可以在一定程度上为正常用户提供服务。
The mechanism of TCP based DoS attack is analyzed, and then a DDoS prevention model based on traffic self-similarity is proposed. The model first calculates the Hurst parameter of traffic by wavelet method, and then it decides whether the system is suffering DoS attack or not. When attack is asserted, connection trust domain is employed to respond to the situation. The model is able to serve the trusted connection even when the system is under DDoS attack.
出处
《计算机应用与软件》
CSCD
北大核心
2008年第11期14-15,19,共3页
Computer Applications and Software
基金
国家863计划信息安全增值服务平台(2005AA145110)。
