基于协议分析技术的网络入侵检测系统中DDoS攻击的方法研究

DDoS Attacks Based on Protocol Analysis of Network Intrusion Detection System Research

随着网络技术的发展,网络环境变得越来越复杂,对网络安全来说,单纯的防火墙技术暴露出明显的不足和弱点,包括无法解决安全后门问题,不能阻止网络内部攻击等问题。在众多的网络安全威胁中,DDoS攻击以其实施容易,破坏力度大,检测困难等特点而成为网络攻击检测与防御的重中之重。近年来,针对网络流量相关性的DDoS攻击检测方法层出不穷,文章在分析DDoS攻击检测方法的基础上,利用基于协议分析技术的网络入侵检测系统对DDoS进行研究。

With the development of network technology,network environment becomes increasingly complex,network security,firewall technology alone exposed the obvious shortcomings and weaknesses,can not be resolved to secure the back door problem,can not stop the internal network attacks.In a large number of network security threats,DDoS its implementation is easy to undermine efforts to detection difficulties in making it become a network attack detection and prevention a top priority.In recent years,an endless stream of network traffic detection of DDoS attacks,in the analysis of the DDoS attack detection method based on the use of protocol analysis technology-based network intrusion detection system against DDoS research.