电信科学 ›› 2015, Vol. 31 ›› Issue (10): 1-196.doi: 10.11959/j.issn.1000-0801.2015270

• 运营技术广角 •    下一篇

分布式DNS反射DDoS攻击检测及控制技术

罗志强,沈军,金华敏   

  1. 中国电信股份有限公司广州研究院 广州 510630
  • 出版日期:2015-10-20 发布日期:2017-07-21

Detection and Control Technology of Distributed DNS Reflective DDoS Attack

Zhiqiang Luo,Jun Shen,Huamin Jin   

  1. Guangzhou Research Institute of China Telecom Co.,Ltd.,Guangzhou 510630,China
  • Online:2015-10-20 Published:2017-07-21

摘要:

分布式DNS反射DDoS攻击已经成为拒绝服务攻击的主要形式之一,传统的基于网络流量统计分析和网络流量控制技术已经不能满足防护需求。提出了基于生存时间值(TTL)智能研判的DNS反射攻击检测技术,能够准确发现伪造源IP地址分组;基于多系统融合的伪造源地址溯源阻断技术,从源头上阻断攻击流量流入网络。

关键词: DNS反射攻击, DDoS攻击, 虚假源地址, 网络安全

Abstract:

Distributed DNS reflective DDoS attack has become one of the main forms of denial of service attacks,and traditional security technology based on network traffic analysis and network traffic control technology can’t meet the needs of protection.Detection technology of DNS reflection attack based on time to live (TTL)value intelligent judgments was proposed,and the detection technology can accurately detect spoofed source IP address of the packet.The control technology based on multi system fusion can block attack traffic flow into the network in the source.

Key words: DNS reflective attack, DDoS attack, fake source address, network security

No Suggested Reading articles found!