Detection and Control Technology of Distributed DNS Reflective DDoS Attack

Zhiqiang Luo; Jun Shen; Huamin Jin

doi:10.11959/j.issn.1000-0801.2015270

您当前的位置：

首页 >

文章列表页 >

Detection and Control Technology of Distributed DNS Reflective DDoS Attack

Operating technology wide-angle | 更新时间：2024-06-05

- Detection and Control Technology of Distributed DNS Reflective DDoS Attack
- Telecommunications Science Vol. 31, Issue 10, Pages: 1-196(2015)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2015270
  CLC：
- Published Online：2015-10，
  
  Published：20 October 2015
- 稿件说明：
移动端阅览
Zhiqiang Luo, Jun Shen, Huamin Jin. Detection and Control Technology of Distributed DNS Reflective DDoS Attack[J]. Telecommunications science, 2015, 31(10): 1-196.
DOI：

Zhiqiang Luo, Jun Shen, Huamin Jin. Detection and Control Technology of Distributed DNS Reflective DDoS Attack[J]. Telecommunications science, 2015, 31(10): 1-196. DOI： 10.11959/j.issn.1000-0801.2015270.

摘要

分布式DNS反射DDoS攻击已经成为拒绝服务攻击的主要形式之一，传统的基于网络流量统计分析和网络流量控制技术已经不能满足防护需求。提出了基于生存时间值（TTL）智能研判的DNS反射攻击检测技术，能够准确发现伪造源IP地址分组；基于多系统融合的伪造源地址溯源阻断技术，从源头上阻断攻击流量流入网络。

Abstract

Distributed DNS reflective DDoS attack has become one of the main forms of denial of service attacks，and traditional security technology based on network traffic analysis and network traffic control technology can’t meet the needs of protection.Detection technology of DNS reflection attack based on time to live （TTL）value intelligent judgments was proposed，and the detection technology can accurately detect spoofed source IP address of the packet.The control technology based on multi system fusion can block attack traffic flow into the network in the source.

关键词

Keywords

references

国家互联网应急中心 . 2013年互联网网络安全态势综述，2014 CNCERT . A Survey of Internet Security Situation in 2013 ， 2014

国家互联网应急中心 . 2014年互联网网络安全态势综述，2015 CNCERT . A Survey of Internet Security Situation in 2014 ， 2015

罗志强，史国水，沈军等 . 移动互联网安全热点技术研究 . 电信科学， 2013 （ Z1 ）： 254 ～ 256 ， 261

Luo Z Q ， Shi G S ， Shen J ， et al . Research on mobile Internet security technology . Telecommunications Science ， 2013 （ Z1 ）： 254 ～ 256 ， 261

唐宏，罗志强，沈军 . 僵尸网络DDoS攻击主动防御技术研究与应用 . 电信技术， 2014 （ 11 ）： 76 ～ 80

Tang H ， Luo Z Q ， Shen J . Research and application of the active defense technology of DDoS attack in botnet . Telecommunications Technology ， 2014 （ 11 ）： 76 ～ 80

徐图，罗瑜，何大可 . 多类支持向量机的DDoS攻击检测的方法 . 电子科技大学学报， 2008 ， 37 （ 2 ）： 274 ～ 277

Xu T ， Luo Y ， He D K . Detecting DDoS attack based on multi-class SVM . Journal of University of Electronic Science and Technology of China ， 2008 ， 37 （ 2 ）： 274 ～ 277

顾晓清，王洪元，倪彤光等 . 基于时间序列分析的应用层DDoS攻击检测 . 计算机应用， 2013 ， 33 （ 8 ）： 2228 ～ 2231

Gu X Q ， Wang H Y ， Ni T G ， et al . Detection of application-layer DDoS attack based on time series analysis . Journal of Computer Applications ， 2013 ， 33 （ 8 ）： 2228 ～ 2231

Views

1067

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research on the application of quantum-secure algorithms in 5G network

Research on new energy station network security assessment method based on improved LSTM network

Application research on network security operation automation practice based on RPA technology

Challenges and innovative solutions of space-ground integrated network security

Development trends of information and communication technology

Related Author

WANG Congli

LI Jinhui

WANG Jingran

XUE Weijia

WANG Jinhua

WANG Qianran

LIU Shan

LI Rui

Related Institution

National Engineering Research Center of Cloud and Network Infrastructure Security

China Telecom Research Institute

State Grid Shanxi Electric Power Company

State Grid Shanxi Electric Power Research Institute

Software Research Institute of China United Network Co., Ltd.

⁰