A Novel Mechanism for Detection and Prevention of Distributed Denial of Service Attacks
Give a simple but practical scheme for detecting and defending against Distributed Denial of Service(DDoS).especially for Highly Distributed DeniaI of Service(HDDoS)attacks by monitoring the increase of new IP addresses.Unlike previous proposals.this proposal includes three modules：detecting,filtering,and illegal-packets analyzing.To improve the detection accuracy,we also proposed a simple but robust algorithm：sliding window algorithm.In the filtering module,a filter perforills its tasks only during attacks.WhiIe the attack.packets-analyzing module usES a trap to analyze attack packets,perfects the defense system. Simulation results demonstrate the effectiveness of the proposed scheme under varieties of DDoS attack scenarios.
DDoS filter sliding window trap
Lin Pingping Zhang Xiaosong
国际会议
The International Conference Information Computing and Automation(2007国际信息计算与自动化会议)
成都
英文
289-292
2007-12-19（万方平台首次上网日期，不代表论文的发表时间）