DDos (distributed denial of service) attack defensive system based on network trap

Abstract

The invention discloses a DDos (distributed denial of service) attack defensive system based on a network trap. The system comprises a honey pot console, a plurality of honey pot systems, an alarm agent and a data shunt, wherein the honey pot system is a cheat host with the same operating system and host operating system; the external characteristics of the cheat host can be used for attracting intrusion of a attacker; and the attack data can be introduced to the data shunt by the honey pot console for protecting the network. With the aadoption of the system, known DDos attack can be defended and the attacker is attracted to enter the trap system, thereby the harm to other systems in the network by the attacker is reduced, and shunting process is simultaneously carried out on the data flow in the network to separate normal flow from DDos attack flow and filter DDos attack flow, so that the normal flow visits a target host according to a source route.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a network trap-based distributed denial of service attack (DDoS) defense system, which is used to quickly respond to the attack when a DDoS attack occurs in an autonomous area network or a local area network. Respond, induce attacks into network traps, and effectively separate legitimate and attack data streams. Background technique [0002] With the rapid development of the Internet, network security has become a concern, and people are paying more and more attention to the detection and prevention of network attacks. Among many network attacks, distributed denial of service (DDoS) is a simple and effective attack method that is difficult to defend against. DDoS attack is a distributed and cooperative large-scale denial of service attack, which has the characteristics of wide attack range and strong concealment. At present, there is no fully effective prev...

AI Technical Summary

Problems solved by technology

However, traditional network traps simply discard data packets for DDoS attacks, resulting in the result that normal users cannot access network resources.

Images