With the rapid expansion of the Internet, Web servers have played a major role in accessing the enormous mass of Web pages to find the information needed by the user. Despite the exponential growth of the WWW, a very ...With the rapid expansion of the Internet, Web servers have played a major role in accessing the enormous mass of Web pages to find the information needed by the user. Despite the exponential growth of the WWW, a very negligible amount of research has been conducted in Web server performance analysis with a view to improve the time a Web server takes to connect, receive, and analyze a request sent by the client and then sending the answer back to client. In this paper, we propose a multi-layer analytical approach to study the web server performance. A simple client-server model is used to represent the WWW server in order to demonstrate how to apply the proposed approach. We developed a systematic, analytical methodology to quantify the communication delay and queuing overhead in a distributed web server system. The approach uses the Computation Structure Model to derive server processing time required to process a request sent from a client and queueing model to analyze the communication between the clients and the server.展开更多
Distributed Denial of Service （DDoS） attack is a major threat to the availability of Web service. The inherent presence of self-similarity in Web traffic motivates the applicability of time series analysis in the st...Distributed Denial of Service （DDoS） attack is a major threat to the availability of Web service. The inherent presence of self-similarity in Web traffic motivates the applicability of time series analysis in the study of the burst feature of DDoS attack. This paper presents a method of detecting DDoS attacks against Web server by analyzing the abrupt change of time series data obtained from Web traffic. Time series data are specified in reference sliding window and test sliding window, and the abrupt change is modeled using Auto-Regressive （AR） process. By comparing two adjacent nonoverlapping windows of the time series, the attack traffic could be detected at a time point. Combined with alarm correlation and location correlation, not only the presence of DDoS attack, but also its occurring time and location can be deter mined. The experimental results in a test environment are illustrated to justify our method.展开更多
Distributed denial of service （DDoS） attacks exploit the availability of Web servers, resulting in the severe loss of their connectivity. We present a robust IP packets filtering mechanism which combines the detecti...Distributed denial of service （DDoS） attacks exploit the availability of Web servers, resulting in the severe loss of their connectivity. We present a robust IP packets filtering mechanism which combines the detection and filtering engine together to protect Web Servers from DDoS Attacks. The mechanism can detect DDoS attacks by inspecting inbound packets with an IP address database, and filter out lower priority IP addresses to preserve the connection for valid users by monitoring the queues status. We use the Netfilter＇s technique, a framework inside the Linux 2.4. X, to implement it on a Web server. Also, we evaluate this mechanism and analyze the influence of some important parameters on system performance. The experimental results show that this mechanism is effective against DDoS attacks.展开更多
在互联网时代,应用层的分布式拒绝服务(Distributed Denial of Service,DDoS)攻击已经成为公共网络的一大威胁,导致许多服务器无法提供服务并遭受严重破坏。为了应对这类攻击,提出一种综合防范策略。分析攻击行为的原理和方式,了解用户...在互联网时代,应用层的分布式拒绝服务(Distributed Denial of Service,DDoS)攻击已经成为公共网络的一大威胁,导致许多服务器无法提供服务并遭受严重破坏。为了应对这类攻击,提出一种综合防范策略。分析攻击行为的原理和方式,了解用户行为的差异性,设计流量监控系统,实时监测网络流量,并在检测到异常流量时及时警示管理员采取应对措施。此外,通过维护Web服务器的黑名单和使用数据过滤等技术,有效屏蔽不必要的流量。通过综合运用这些策略,可以有效防范应用层的分布式拒绝服务攻击,确保服务器的正常运行。展开更多
With the explosive growth of the World Wide Wed,many popular Web sites are faced with the challenge of the overload of tremendous requests.The best way out is using distributed Web server systems for their good scalab...With the explosive growth of the World Wide Wed,many popular Web sites are faced with the challenge of the overload of tremendous requests.The best way out is using distributed Web server systems for their good scalability and low costs.In this paper,we try to give a comprehensive survey on the underlying techniques of the distributed Web server systems:request-dispatching mechanisms,load-balancing algorithms,Web content replication and distribution schemas and other important aspects.展开更多
介绍了提高Web服务器性能的前沿技术——分布式Web服务器系统,讨论了现有各种方案的优缺点,在此基础上提出一种新的分布式Web服务器系统.该系统使用基于标记的缓存协作用户请求分发方法(tag based cache cooperative Web requests distr...介绍了提高Web服务器性能的前沿技术——分布式Web服务器系统,讨论了现有各种方案的优缺点,在此基础上提出一种新的分布式Web服务器系统.该系统使用基于标记的缓存协作用户请求分发方法(tag based cache cooperative Web requests distribution,简称TB-CCRD),通过前端机把系统中各个Web服务器的缓存组织成一个大的虚拟缓存系统,提高系统的整体缓存命中率,缩短了请求的响应时间;通过分布式处理TCP连接转交来消除前端机的性能瓶颈;利用标记通告URL在缓存中的位置,避免了额外的系统内部通信.从而得到了一个可扩展的高性能分布式Web服务器系统.展开更多
文摘With the rapid expansion of the Internet, Web servers have played a major role in accessing the enormous mass of Web pages to find the information needed by the user. Despite the exponential growth of the WWW, a very negligible amount of research has been conducted in Web server performance analysis with a view to improve the time a Web server takes to connect, receive, and analyze a request sent by the client and then sending the answer back to client. In this paper, we propose a multi-layer analytical approach to study the web server performance. A simple client-server model is used to represent the WWW server in order to demonstrate how to apply the proposed approach. We developed a systematic, analytical methodology to quantify the communication delay and queuing overhead in a distributed web server system. The approach uses the Computation Structure Model to derive server processing time required to process a request sent from a client and queueing model to analyze the communication between the clients and the server.
基金Supported by the National Natural Science Funda-tion of China (60373075)
文摘Distributed Denial of Service （DDoS） attack is a major threat to the availability of Web service. The inherent presence of self-similarity in Web traffic motivates the applicability of time series analysis in the study of the burst feature of DDoS attack. This paper presents a method of detecting DDoS attacks against Web server by analyzing the abrupt change of time series data obtained from Web traffic. Time series data are specified in reference sliding window and test sliding window, and the abrupt change is modeled using Auto-Regressive （AR） process. By comparing two adjacent nonoverlapping windows of the time series, the attack traffic could be detected at a time point. Combined with alarm correlation and location correlation, not only the presence of DDoS attack, but also its occurring time and location can be deter mined. The experimental results in a test environment are illustrated to justify our method.
基金Supported by the National Natural Science Foun-dation of China (60373075 ,60473055)
文摘Distributed denial of service （DDoS） attacks exploit the availability of Web servers, resulting in the severe loss of their connectivity. We present a robust IP packets filtering mechanism which combines the detection and filtering engine together to protect Web Servers from DDoS Attacks. The mechanism can detect DDoS attacks by inspecting inbound packets with an IP address database, and filter out lower priority IP addresses to preserve the connection for valid users by monitoring the queues status. We use the Netfilter＇s technique, a framework inside the Linux 2.4. X, to implement it on a Web server. Also, we evaluate this mechanism and analyze the influence of some important parameters on system performance. The experimental results show that this mechanism is effective against DDoS attacks.
文摘在互联网时代,应用层的分布式拒绝服务(Distributed Denial of Service,DDoS)攻击已经成为公共网络的一大威胁,导致许多服务器无法提供服务并遭受严重破坏。为了应对这类攻击,提出一种综合防范策略。分析攻击行为的原理和方式,了解用户行为的差异性,设计流量监控系统,实时监测网络流量,并在检测到异常流量时及时警示管理员采取应对措施。此外,通过维护Web服务器的黑名单和使用数据过滤等技术,有效屏蔽不必要的流量。通过综合运用这些策略,可以有效防范应用层的分布式拒绝服务攻击,确保服务器的正常运行。
文摘With the explosive growth of the World Wide Wed,many popular Web sites are faced with the challenge of the overload of tremendous requests.The best way out is using distributed Web server systems for their good scalability and low costs.In this paper,we try to give a comprehensive survey on the underlying techniques of the distributed Web server systems:request-dispatching mechanisms,load-balancing algorithms,Web content replication and distribution schemas and other important aspects.
文摘介绍了提高Web服务器性能的前沿技术——分布式Web服务器系统,讨论了现有各种方案的优缺点,在此基础上提出一种新的分布式Web服务器系统.该系统使用基于标记的缓存协作用户请求分发方法(tag based cache cooperative Web requests distribution,简称TB-CCRD),通过前端机把系统中各个Web服务器的缓存组织成一个大的虚拟缓存系统,提高系统的整体缓存命中率,缩短了请求的响应时间;通过分布式处理TCP连接转交来消除前端机的性能瓶颈;利用标记通告URL在缓存中的位置,避免了额外的系统内部通信.从而得到了一个可扩展的高性能分布式Web服务器系统.
