DDOS攻击分析及其防范策略

DDOS Attack Analysis and Its Defense Strategy

分布式拒绝服务(DDOS)攻击防御是网络安全领域的长期重要课题。近年来,随着Internet业务与广播电视日渐融合,广电网络成为DDOS攻击新目标,因此DDOS攻击防御亦成为广电网络安全新课题。本文以流行最为广泛的SYN Flooding攻击为重点研究对象,基于DDOS攻击原理及攻击方式分析,提出DDOS攻击识别方法;从服务器、网络设备及安全设备等方面,重点阐述以预防为主确保网络安全的攻击防御策略、防御措施及处理方法。

The defense of DDOS （Distributed Denial of Service） is long-term important topic in the field of network security. In recent years, with Internet service and broadcasting ＆ television service merged gradually, broadcasting ＆ television network becomes new target of DDOS attack; consequently, DDOS attack defense also becomes new problem of broadcasting ＆ television network security. The paper focuses on the study of the most popular SYN Flooding, analyses attack principle and attack mode, presents attack identification method. And from server and network equipment, security equipment, etc., it emphatically describes defense strategy and measures and approach.