分布式拒绝服务(distributed denial of service, DDoS)攻击严重威胁了网络的安全性.网络攻击的攻击树建模方法是卡内基梅隆大学提出的一种以结构化、可重用的方式来描述攻击信息建模方法;介绍了攻击树建模方法,研究了分布式拒绝服务攻...分布式拒绝服务(distributed denial of service, DDoS)攻击严重威胁了网络的安全性.网络攻击的攻击树建模方法是卡内基梅隆大学提出的一种以结构化、可重用的方式来描述攻击信息建模方法;介绍了攻击树建模方法,研究了分布式拒绝服务攻击的攻击树,给出了分布式拒绝服务攻击的具体的攻击树模型,并分析了其可重用性,探讨了如何结合攻击树采取措施提高网络安全性;安全分析和设计人员可借此构造更安全的信息系统.展开更多
Through the analysis to the DDoS（distributed denial of service） attack, it will conclude that at different time segments, the arrive rate of normal SYN （Synchronization） package are similar, while the abnormal pac...Through the analysis to the DDoS（distributed denial of service） attack, it will conclude that at different time segments, the arrive rate of normal SYN （Synchronization） package are similar, while the abnormal packages are different with the normal ones. Toward this situation a DDoS defense algorithm based on multi-segment timeout technology is presented, more than one timeout segment are set to control the net flow. Experiment results show that in the case of little flow, multi-segment timeout has the ability dynamic defense, so the system performance is improved and the system has high response rate.展开更多
基金Supported by the National High-Tech Research and Development Plan of China under Grant Nos.2006AA01Z412, 2006AA01Z437, 2006AA01Z433 (国家高技术研究发展计划(863))
文摘分布式拒绝服务(distributed denial of service, DDoS)攻击严重威胁了网络的安全性.网络攻击的攻击树建模方法是卡内基梅隆大学提出的一种以结构化、可重用的方式来描述攻击信息建模方法;介绍了攻击树建模方法,研究了分布式拒绝服务攻击的攻击树,给出了分布式拒绝服务攻击的具体的攻击树模型,并分析了其可重用性,探讨了如何结合攻击树采取措施提高网络安全性;安全分析和设计人员可借此构造更安全的信息系统.
基金Supported by the Natural Science Foundation ofHebei Province (F2004000133)
文摘Through the analysis to the DDoS（distributed denial of service） attack, it will conclude that at different time segments, the arrive rate of normal SYN （Synchronization） package are similar, while the abnormal packages are different with the normal ones. Toward this situation a DDoS defense algorithm based on multi-segment timeout technology is presented, more than one timeout segment are set to control the net flow. Experiment results show that in the case of little flow, multi-segment timeout has the ability dynamic defense, so the system performance is improved and the system has high response rate.
