分布式拒绝服务攻击的形式化描述

The Formal Description of Distributed Denial of Service Attack

分布式拒绝服务攻击是一类难以防范且危害巨大的入侵方式,通过对攻击原理与特征的研究,提出一种面向对象的形式化描述。该方法采用三层框架结构,准确地描述了分布式拒绝服务攻击的攻击方式、攻击特性,同时每种具体攻击方式之间的关系和各种攻击方式的具体特性也都得到了完整地体现。采用面向对象定义的形式化描述,有利于对此类型攻击方式的分析、检测与判断。这种形式化描述法已应用到入侵检测系统中,并取得良好的效果。

The Distributed Denial oF Service attack (DDoS) is one of the dangers in break method,it's difficult to defense and can cause serious damage to the system.Guided with the attack principles and characteristics,we put forward a formal object-oriented description,which contains a three-level framework.This frame offers full specifications all kinds of DDoS methods and their features and the relations between one another.Its greatest merit lies in that it contributes to analyzing,checking and judging DDoS.Now this formalized method has been used in a special IDS and it works very effectively.