IPv6下DoS/DDoS SYN Flood入侵和攻击的检测

在网络安全状况划分的前提下,分析SYN Flood半连接攻击的形式和特点.为了防范这种使网络资源耗尽的攻击,提出Ipv6下跟踪三次握手的SYN Flood入侵和攻击的检测方法,对系统实现的数据结构进行设计与论证.最后在"一个广播的局域网"的问题规模下对该系统的有效性进行测试.结果表明,模拟检测系统能够将含错误数据的数据包丢弃,将分片的数据包重新组合成完整的数据包.

Detection of intrusion and attack from SYN Flood with Ipv6

On the premise of divided network conditions in terms of its safety,the behaviour and characteristics of semi-joining attack of SYN Flood was analyzed.For guarding against this kind of attack which could make a network resources exhausted,a detection method was proposed,where the three-handshake intrusion and attack from SYN Flood was tracked with Ipv6.The data structure implemented by the system was also designed and proved.Finally a test for the usefulness of this system was conducted in connection with a local network of broadcasting.The result showed that,by using this simulation detection system,the defective data could be discarded and the remained scattered data could be recomposed into a complete data package.