拒绝服务攻击防御方案思考

Ideas on Defensive Schemes to Denial of Service

随着网络的发展,拒绝服务攻击成为了网络安全的头号敌人。它具有的高强度特征和高隐蔽性导致其破坏力很大。对于拒绝服务攻击的防御,本文从预防、检测和响应三个阶段,针对各个阶段的特性,引入了具有实际可行性的思路。对各种方案,总结了其优缺点,便于进一步的改善,早日形成一个完善的防御体系。

With the development of the network,Denial of Service（DoS） attacks has become the top enemy to network security.With the characteristics of high strength and high concealment,DoS has a great destructive power.Aimed at the defense of DoS,some feasible ideas are introduced in this proposal according to the characteristics of the prevention,detection and response phase dividedly.For each scheme,their advantages and disadvantages are summarized to improve further and form a perfect defense system earlier.