一种基于分布式的DDos防御体系设计

Technology of a Defending Structure Against DDos Based on Distributed Tactics

首先深入分析和评价了目前DDos攻击的防御策略,然后针对它们的不足,提出了一种分布式协同防御的DDos防御体系,该体系将防御节点分布式部署于ISP网络的各个位置,通过统一的管理方式,采用受害端检测,源端防御的策略来实现对DDos攻击的有效防御。

This article briefly analyze and evaluate the existed technology of the tactics against DDos,and then a structure based on distributed tactic and coordinated defending is presented and designed to improved them.The structure deploys the defending nodes distributedly which are managed unifiedly in a ISP network,It adopts a efficient technique that the attack is detected in victim network and recovered in source network.