| DDoS Defense Algorithm Based on Multi-Segment Timeout Technology |
| |
| 作者姓名： | DU Ruizhong YANG Xiaohui MA Xiaoxue HE Xinfeng |
| |
| 作者单位： | Institute of Network Technology, Hebei University, Baoding 071002, Hebei, China |
| |
| 摘 要： | Through the analysis to the DDoS（distributed denial of service） attack, it will conclude that at different time segments, the arrive rate of normal SYN （Synchronization） package are similar, while the abnormal packages are different with the normal ones. Toward this situation a DDoS defense algorithm based on multi-segment timeout technology is presented, more than one timeout segment are set to control the net flow. Experiment results show that in the case of little flow, multi-segment timeout has the ability dynamic defense, so the system performance is improved and the system has high response rate.
|
| 关 键 词： | DDoS 动态防御 网络安全 净流量分析 |
| 文章编号： | 1007-1202（2006）06-1823-04 |
| 收稿时间： | 2006-05-20 |
DDoS defense algorithm based on multi-segment timeout technology |
| |
| DU Ruizhong YANG Xiaohui MA Xiaoxue HE Xinfeng.DDoS Defense Algorithm Based on Multi-Segment Timeout Technology[J].Wuhan University Journal of Natural Sciences,2006,11(6):1823-1826. |
| |
| Authors: | Du Ruizhong Yang Xiaohui Ma Xiaoxue He Xinfeng |
| |
| Institution: | (1) Institute of Network Technology, Hebei University, 071002 Baoding, Hebei, China |
| |
| Abstract: | Through the analysis to the DDoS(distributed denial of service) attack, it will conclude that at different time segments, the arrive rate of normal SYN (Synchronization) package are similar, while the abnormal packages are different with the normal ones. Toward this situation a DDoS defense algorithm based on multi-segment timeout technology is presented, more than one timeout segment are set to control the net flow. Experiment results show that in the case of little flow, multi-segment timeout has the ability dynamic defense, so the system performance is improved and the system has high response rate. |
| |
| Keywords: | DDoS(distributed denial of service) multi-segments timeout dynamic defense net flow analysis |
| 本文献已被 CNKI 维普 万方数据 SpringerLink 等数据库收录！ |
