基于云计算平台的防御拒绝服务攻击方法

Defense Strategy of Denial of Service Attacks Based on Cloud Computing Platform

随着企业的关键核心数据及服务从企业网迁移到了云服务中心,更多的应用和集成业务开始依靠互联网,拒绝服务带来的后果和破坏将会明显地超过传统的企业网环境。在云计算环境下,具体的应用成为攻击目标,攻击者会使用针对具体应用的攻击方法来攻击受害者的在线服务。文章提出了一种基于云计算平台的处理拒绝服务攻击的策略,主要解决了在云计算平台上对具体应用进行HTTP拒绝服务攻击的问题。通过该策略,能够在即使黑客伪装为合法用户后仍然能够防御拒绝服务攻击。

Recently, the cloud computing became more and more popular for its high-performance computing, high availability, low cost. As the key core data and services of the enterprise migrated from enterprise network to the center of the cloud service, more applications and integration business started to rely on the Internet, so the conse- quences and damage of denial of service will be significantly more than the traditional enterprise network environment. In the cloud computing environment, the attacker will attack the victim＇s online services by targeting the specific applica- tion. The paper proposed the treatment strategy of denial of service attacks based on a cloud computing platform, mainly to solve specific application on the HTTP denial of service attacks. Through this strategy, even if the attacker can pre- tend to be legitimate users, it will be still able to defensive denial of service attacks.