一种应对网络流量攻击的方法

提出了一种基于频谱分析的方法,该方法利用cisco设备上的NetFlow所采集的路由器转发的数据包的基本信息作为样本,通过样本的自我相函数来建立时间序列模型,并对此进行离散的傅立叶变换得出其频谱表达式,对于数据时序变化剧烈的频谱则采用最大熵算法,经过分析确定了以60%作为分割点的频率范围可以确定攻击流的规模,从而有效地控制了利用包头进行欺骗的拒绝服务攻击所带来的危害.

A Method of Network Flow Attack

This paper introduced a method based on spectral analysis.With the basic message of data packet transmitted from the router gathered by the NetFlow in cisco equipment as a sample,the orders of the time series models have been determined with the sample autocorrelation function.By performing a discrete-time Fourier transform on the autocorrelation function of the sample,this paper also introduced the maximum entropy spectral arithmetic for the data series varying acutely.Through analysis,it defined the attack scale based on F(60%) and controlled the danger coming from the DoS attacks based on header content.