基于DRDOS攻击的请求-响应包对确认方法

The pair of request-response packet confirmation method for DRDOS attacks

设计了一种介于放射器与以太网之间的检测过滤器模型.该模型的侦测过滤原理依赖于网络多层协议中请求-响应数据包对的对应关系来检测DRDOS攻击.实验结果表明,该模型能简单而有效地处理DRDOS攻击包,具有较好的防御作用.

A novel detecting-filtering model, which is between reflector and ethernet, was devised. This model mainly depends on pairs of request-response packets from muhilayer protocols of network for DRDOS detection. The experiment results show it is simple and effective to dispose of DRDOS attacking-packets with better defense reaction.