拒绝服务攻击/分布式拒绝服务攻击防范技术的研究

研究常见的拒绝服务攻击和分布式拒绝服务攻击方法,深入分析各种相关防护技术,提出了从设备自身加固入手,以分布式检查,管理和技术双管齐下的思路。给出了应对这种目前开放网络中的顽疾的综合解决方案。笔者提及的相关解决方案涉及到安全评估加固技术、攻击检测技术、流量清洗技术、安全管理技术;也给出了各种不同职责岗位的工作职责,提出了防止拒绝服务攻击必须从做好安全加固,采用积极的方式应对这种攻击的思路。笔者提出的观点可用于指导企业进行综合的拒绝服务攻击防御,也可以作为安全技术及理论的研究者的参考,提到的各种防范技术均经过了实践的验证。

Research on Safeguard Techniques against DoS and DDoS Attacks

The common means for DoS (denial-of-service attack) and DDoS (distributed denial-of-service) attack were studied, and all kinds of related defense techniques were deeply analyzed. A thread for the defense techniques through reinforcing the equipment and distributed detection, which combined technology and management, was put forward. And then, a comprehensive solution to the open network problems was presented, which was involved in security assessment, attack detection, flux laundering, security management and corresponding job responsibilities. This study may provide a guide for the enterprises to defense DoS and DDoS attacks.