DDoS客服协同防御机制研究

DDoS defense scheme using collaboration of client and servers

为了抵御分布式拒绝服务攻击(DDoS),文章提出了从傀儡机和服务器端进行协同防御的机制,对于面向无连接的攻击,主要在傀儡机端进行主动检测防御,对于面向连接的攻击,采用客服协同的SYN Cookie技术,从而主动有效地防御攻击DDoS;仿真测试结果验证了该机制的有效性。

To defend against the distributed denial of service（DDoS） attack, a special DDoS defense scheme using the collaboration of puppet machine and servers is proposed. For the connectionless oriented attack, the active detection and defense is mainly conducted on puppet-side. For the connection oriented attack, the technology of SYN Cookie using the collaboration of client and servers is applied. So it can defend against the DDoS attack effectively and initiatively. Simulation results validate the ef- fectiveness of the said scheme.