Distributed service attack refusing defense method, apparatus and system

Abstract

The invention embodiment discloses a defense method, a device and a system for the DDos attack, which relate to the network technology and aim to solve the problem of low cleaning accuracy caused by the cleaning of the unidirectional data flow obtained by the network cleaning device found in the prior art. The defense method of the DDos attack in the invention embodiment includes that the data flow in the network is acquired and detected to obtain the attack information; the upstream data flow in the network is acquired and filtered to obtain the upstream data information of the protected host; the downstream data flow with the target of the protected host is processed with conduction, supplement and cleaning according to the attack information and the upstream data flow from the protected host. The invention embodiment also provides a measurement-control device, a cleaning device and a defense system for the DDos attack. The defense method, the device and the system for the DDos attack are applicable to the detection and defense of the DDos attack in the network technology.

Description

Technical field [0001] The present invention relates to network technology, in particular to the defense of distributed denial of service (DDoS: Distributed Denial of Service) attacks. Background technique [0002] DDOS attack means that the attacker uses the master control host (possibly multi-level and multi-layer) to control a large number of infected and controlled hosts to form an attack network to carry out a large-scale denial of service attack on the victim host. This kind of attack can often amplify the attack of a single attacker in a series. Under the attack of high-speed data packets, the key resources of the victim's host, such as bandwidth, buffers, and CPU resources, are quickly exhausted. The victim's host may crash or spend a lot of time processing the attack packet and cannot provide normal services to the victim and user. Causes serious economic losses, so effective detection and defense of DDoS attacks is an important part of building a secure network. [0003...

AI Technical Summary

Problems solved by technology

[0008] The embodiment of the present invention provides a distributed denial of service attack defense method, device and system, which can solve the problem that the network cleaning device can only obtain one-way network data flow The problem of low cleaning accuracy caused by cleaning

Images