一种主动防御UDP Flood攻击的机制

An active defense mechanism of UDP Flood attack

在传统防御UDPFlood攻击的基础上研究新的处理过程,提出了一种主动防御UDPFlood攻击的机制.该机制主要通过攻击防御前的数据包特征检查及未验证表和已验证表的调用进行攻击防御.测试表明,该机制能在保证正常网络通信情况下,实现对攻击包的拦截,有效防御UDPFlood攻击.

Researchs new treating processes deeply based on those tradional ways of defense UDP Flood,proposes an active defense mechanism of UDP Flood attack. This mechanism uses data program characteristic checking and pre-confirmation and confirmation tables to defend UDP Flood attack. Throught a test,it proves this mechanism can defend UDP Flood attack validitily on condition of guaranteeing the proper network correspondence.