基于DDoS攻击的检测与防御实验系统的设计

Design of DDoS Attack Detection and Defense Experimental System

DDoS是一种通过消耗目标资源来阻止用户正常访问目标服务的网络攻击形式,它对网络和网络服务的可用性构成极大的威胁,同传统的DDoS相比,基于应用层的DDoS攻击隐藏效果更好,破坏力更强。DDoS攻击检测是整个安全防范体系的重要一环,通过快速、准确地检测和识别攻击,为安全防御提供有效支撑。现有的大多数DDoS检测方法难以区分攻击者的攻击行为和突发的大流量正常请求行为,基于网络行为分析的检测方法对于攻击者的异常行为能够较好的辨识,因此基于网络行为分析的DDoS检测方法的实验系统对教学显得尤为必要。

DDoS is a form of the cyber attack by consuming target resources to prevent users’normal access to target services,which is an immense threat to the Internet and the service availability.The DDoS attack based on application layer is better concealment and more damage than the traditional one.DDoS attack detection,which could detect and identify attack rapidly and accurately and provide effective support for Safety and Protection System(SPS),is an essential part in the overall SPS.However,it is hard for most of the existing DDoS detection methods to distinguish the attack behavior from the sudden non-malicious mass flow request behavior.It is noticed that the detection method based on network behavior analysis can better identify the abnormal behavior of the attackers.Therefore,the experimental system of DDoS detection method based on network behavior analysis is especially necessary for teaching.