分布式服务拒绝攻击的原理及防范措施

Analysis of DDoS Attack and Its Defense Methods

本文分析了网络黑客的新型攻击方法——分布式服务拒绝(DDoS)——的原理,指出DDoS攻击主要利用了TCP/IP协议的一些安全漏洞.针对DDoS的特点,本文提出了若干积极防范措施,可较有效地防止黑客的攻击.

The principle of the hacker's new attack method, Distributed Denial-of-Service (DDoS). is analyzed in this paper, and the fact that some security problems of TCP/IP protocol are utilized by DDoS is also discussed. Aiming at the features of DDoS, some defense methods are proposed to effectively prevent the hackers' attack.