一種全面主動的防御DDoS攻擊方案

DDoS 攻擊的防御是當(dāng)前網(wǎng)絡(luò)安全研究領(lǐng)域中的難點(diǎn)。文章提出的方案能夠全面、主動預(yù)防DDoS 攻擊。使用蜜罐技術(shù)能夠預(yù)防已知類型的DDoS 攻擊；使用基于RBF-NN 能夠?qū)崟r(shí)檢測DDoS 攻擊，檢測率可以達(dá)到97.9%；使用分塊包標(biāo)記算法進(jìn)行追蹤能夠保持較低的重構(gòu)誤報(bào)率和較低的計(jì)算復(fù)雜度；使用分組漏斗的負(fù)載均衡技術(shù)能夠有效的緩解攻擊效果，保證了服務(wù)質(zhì)量。該方案所采用的技術(shù)，實(shí)現(xiàn)簡單，代價(jià)小，具有很好的實(shí)際應(yīng)用前景。
關(guān)鍵詞：分布式拒絕服務(wù)；拒絕服務(wù)；神經(jīng)網(wǎng)絡(luò)；IP 追蹤

Abstract:The defense of DDoS attacks has become the difficult area in network security.The
proposed scheme can prevent DDoS attacks roundly and actively.It implements detector based on RBF-NN to detect DDoS attacks ,and the precise can reach 97.9%;implements an IP traceback scheme with packet marking in blocks,which provides higher precision and more efficient computation;implements a novel approach named Packet funneling to mitigate DDoS attacks,it ensures the quality of service. The technology of the scheme is practical and easy to
deploy,low price,it has the very good application prospect.
Key Words:DDoS；DoS；Neural Network;IP traceback