Method and system for preventing refusal service attack

Abstract

The invention discloses a method and a system for preventing the attack of a denial service. The method includes the following steps: step A, before a connection request is processed normally, a message transmitted from an initiator to a target terminal is intercepted and captured and the message content of the message is analyzed; step B, the attack of the denial service is judged according to the message content and treatment for preventing the attack of the denial service is carried out. The invention can effectively prevent the attack of denial service in a normal working state.

Description

technical field [0001] The invention relates to the field of network information security, in particular to a method and system for preventing denial of service attacks. Background technique [0002] Denial of Service attack (Denial of Service, DOS) is an attack on servers and switching devices on the existing Internet. They attack the defects or weak points of existing servers, causing the devices to crash and stop working, so as to affect the normal operation of the server. business purpose. Flood (also called flood attack, which is a type of denial of service attack) attack is a typical DOS attack. They send a large number of messages in a short period of time to exhaust the device memory resources and CPU resources to achieve the attack. Purpose. This kind of attack has strong destructive power, and includes many new types, such as SYN Flood, UDP Flood, ICMP Flood and so on. [0003] SYN Flood attack (flood attack), its principle is mainly to send a large number of TC...

AI Technical Summary

Problems solved by technology

[0006] Preventing denial of service attacks is an important function of existing network switching equipment. Currently, there are clear requirements on the standards and specifications of switching equipment. However, due to the lack of current protocol stacks, the industry can only prevent denial of service attacks When an attack occurs, stop working and enter the closed state. When the attack stops, it will return to the normal working state. When the switching device is under attack, it can prevent denial of service attacks in the normal working state, and the forwarding of normal packets will not be affected.

Images