DDoS攻击的检测与溯源探析

Detection and Traceability Analysis of DDoS Attacks

分布式拒绝服务攻击是当前流行的网络攻击手段之一,影响力巨大。本文主要探讨了DDoS攻击的检测方法和IP溯源技术,重点分析3种DDoS检测方法:流量、日志、数据包分析法,提出了运用数据包切片标记实现对伪造IP攻击溯源的方法。通过搭建分布式DDoS攻击实验环境,综合应用流量监控、日志分析和数据包切片标记的方法实现了对DDoS的IP溯源。通过反复实验测试,证明方法的可行性、准确率可达90%。

Distributed denial-of-service attack is one of the most popular network attack methods and has great influence.This paper mainly discusses the detection methods of DDoS attacks and IP tracing technology,focuses on analyzing three DDoS detection methods:traffic,log and packet analysis,and proposes a method to trace forged IP attacks by using packet slice marking.By setting up the experimental environment of distributed DDoS attack,the IP tracing of DDoS attack is realized by integrating the methods of traffic monitoring,log analysis and packet slice marking.Through repeated experiments,the feasibility and accuracy of the method can reach 90%.