大流量分布式拒绝服务攻击的防御策略研究

Research on high-rate distributed denial of services attack

大流量分布式拒绝服务攻击(High-rate Distributed Denial of Service Attack)是指导致网络流量激增,呈明显异常的"淹没受害者"式的DDoS,简称HDDoS。与其相对应的概念是低流量DDoS。通过建立、分析HDDoS的概念模型总结了其特点、分析了当前HDDoS防御策略的发展趋势。提出了一种基于离群数据挖掘算法的HDDoS防御策略ODM方法。实验证明,ODM方法解决了DDoS过滤中产生的间接伤害无法恢复的问题,是防御HDDoS的一种新思路。

High rate distributed denial of service attack（HDDoS） refers to DDoS attack that whose traffic is huge, and lead to a great abnormity comparing to normal circumstance. It is a flood-style DDoS. This paper summarizes characteristics of HDDoS, analyzes trends of HDDoS defense strategy. Give out a outlier detection based HDDoS defense strategy, the ODM method. Experiments show that the ODM method figures out how to mitigate the indirect damage caused by DDoS filtering. The ODM method shows a new way to handle HDDoS.