一种全面主动的防御DDoS攻击方案

DDoS 攻击的防御是当前网络安全研究领域中的难点。文章提出的方案能够全面、主动预防DDoS 攻击。使用蜜罐技术能够预防已知类型的DDoS 攻击；使用基于RBF-NN 能够实时检测DDoS 攻击，检测率可以达到97.9%；使用分块包标记算法进行追踪能够保持较低的重构误报率和较低的计算复杂度；使用分组漏斗的负载均衡技术能够有效的缓解攻击效果，保证了服务质量。该方案所采用的技术，实现简单，代价小，具有很好的实际应用前景。
关键词：分布式拒绝服务；拒绝服务；神经网络；IP 追踪

Abstract:The defense of DDoS attacks has become the difficult area in network security.The
proposed scheme can prevent DDoS attacks roundly and actively.It implements detector based on RBF-NN to detect DDoS attacks ,and the precise can reach 97.9%;implements an IP traceback scheme with packet marking in blocks,which provides higher precision and more efficient computation;implements a novel approach named Packet funneling to mitigate DDoS attacks,it ensures the quality of service. The technology of the scheme is practical and easy to
deploy,low price,it has the very good application prospect.
Key Words:DDoS；DoS；Neural Network;IP traceback