摘要
SYN Flood攻击是DDoS中常用的攻击手段,本文针对当前SYN Flood攻击的特点,提出了一种基于超时重发机制的SYN Flood攻击防御方法。该方法可运行在服务器主机或防火墙上,具有易于实现,系统资源耗费小,不需要硬件支撑等优点。分析表明,该方法对SYN Flood攻击具有良好的防御效果。
SYN Flood is a typical attack of DDoS.For the current characteristics of SYN Flood attack,thepaper proposes a new defensive method of SYN flood attack.This method can be run on the server host orthe firewall,with easy to implement,small consumption of system resources and not required hardware tosupport.According to the analysis,this method has a good defensive effect to SYN Flood attack.
作者
张德栋
Dedong Zhang(Institute of Computing Technology, China Academy of Railway Sciences, Beijing,100081, China)
出处
《电子科学技术》
2017年第4期87-90,共4页
Electronic Science & Technology
