基于可信度的App-DDoS攻击的分布式流量控制模型

针对应用层分布式拒绝服务（application layer DDoS,简称App-DDoS）攻击的特点，
结合流量控制技术，应用可信度的概念和分布式处理的思想，提出了基于可信度的App-DDoS攻击的分布式流量控制模型。该模型以正常用户的服务请求数据分布规律作为计算可信度的依据，利用多层次结构，在网络拓扑的不同节点上实现流量控制，从而实现了在防御App-DDoS 攻击的同时，降低了对网络性能的影响。
关键字：应用层分布式拒绝服务；流量控制；可信度；服务请求数据分布规律

Distributed flow control model of the App - DDoS attacks based on the credibility LONG Shi-gong [1], ZHAO Meng-long [2] (Institute of Computer Software and Theory, Guizhou University, Guizhou Guiyang, 550025)Abstract: The application layer distributed denial of service (application layer DDoS, referred to as App-DDoS) attack characteristics, combined with flow control technology, the applications of credibility and the thought of distributed processing, made Distributed flow control model of the App-DDoS attacks based on the credibility. The model calculated the credibility with the normal user's service request for data distribution and achieve flow control in different nodes of the topology network with multi-level structure,thus not only achieve the defense against the App-DDoS attack at the same time, but also reduced the impact on performance of network.
Keywords: application-level distributed denial of service ； traffic control ；
credibility； service request for data distribution services