DDoS攻擊及其抵御機制研究.pdf

1、合肥工業(yè)大學碩士學位論文DDoS攻擊及其抵御機制研究姓名：施偉偉申請學位級別：碩士專業(yè)：計算機軟件與理論指導教師：葉震20090301ResearchoilDDoSAttacksandDefensesystemAbstractAstherapiddevelopmentoftheInternet，themoredependentonit，themoreattentionwouldbepaidtonetworksecurityUnfortu

2、nately，becauseofthedeficiencyinthenetwork(especiallytheTCP／IPprotoc01)，variousattacktechniquesincreasedramatically，amongwhichDenialofService(DoS)Attacksbecomethecommonnetworkattacktechniquesbythecharacteristicsthatextens

3、iveattackrange，strongconcealment，simplenessandefficiency，etcTheyhavegreatlyinfluencedtheeffectiveserviceofnetworkandhostsystemsWhileDistributedDenialofService(DDoS)Attacksarethreateningnetworksecuritysinceitisdifficultte

4、cognizeanddefenseduetotheirconcealmentanddistributionAkeychallengefordefensetheattackishowtodiscriminatelegitimatetrafficfrommalicioustrafficaccuratelyFromthispointofviewthemainworksareasfollows：(1)AfterthemethodofDoSatt

5、acksiSsummarizedsystemically，DDoSattacksprinciplesareanalyzed，thedevelopmenthistoryofDDoSattackstoolsisintroduced，andtheprimarycharacteristicofthreetoolsiscomparedThen，OnthebasisofmeansofclassificationforDDoSattacksarein

6、troducedsimplyaschemeofclassificationisproposed(2)ThethesisoverviewstheresearchofdefenseagainstDDoSattacksfromfourbroadcategories：attackprevention，attackdetection，attacksourceidentificationandattackreactionAtthebasisofcl

7、assifywediscusstheadvantagesanddisadvantagesofeachmechanismandpointoutthatthecurrentmechanismsstillresistdeficiencies(3)Inordertofacethechangingattacks，strengthenonreactionmechanismhasmorerealityandfeasibilityAdefensemod

8、elbasedonTCP——IPHeaderAnalysisandProactiveTests(THAPT)isproposedTheseattacksweredifferentiatedintoConnectionorientedandConnectionlessoriented，thuswetreatthemdifferentlyusingdifferentmeansAnalyzingtheTCP—IPHeaderagainstth

9、ewelldefinedrulesiSdesignedtodefendtheConnectionlessorientedattack，suchasUDPfloodattackWhiletheproactivetestbaseddifferentiationtechniquewasproposedtohandleConnectionorientedattacksolelybecauseTCPprotocolhasthebuiltincon