A method of active defense against Trojan horses based on virtual environment

Abstract

The invention discloses an active Trojan horse defense method based on a virtual environment. According to the method, based on the existing DDoS defense base, a virtual controller is firstly added between a client and a server side which thus is directly exposed in front of the client. The request of the client is mapped to the virtual controller from the original direct access to the server side, the virtual controller performs behavior detection based on the existing detection technology, and the detection result determines that whether the client has the right to access the server side. If the virtual controller determines that the request is a DDoS attack behavior, the request of the client cannot reach the server side, and thereby the security of the server side is effectively protected. Meanwhile, the virtual controller has the self-establishing and destroying capability which ensures that the virtual controller has very strong resource virtualization capability, thus the DDoS attack can be effectively resisted.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a DDoS active defense method based on a virtual controller. Background technique [0002] With the prosperity of the Internet, network intrusion incidents occur frequently, and various attack methods emerge in an endless stream. Among them, denial of service attack (DoS) has become the most common network attack because of its wide attack range, strong concealment, simple and effective, destructive and difficult to defend. One of the methods greatly affects the effective services of the network and the host system, especially the distributed denial of service attack DDoS, which has a long incubation period, a high degree of attack concurrency, stronger concealment, and greater destructiveness, which seriously threatens the security of the Internet. [0003] Currently, common methods for defending against DDoS attacks include: [0004] 1. Ensure that all servers use the ...

AI Technical Summary

Problems solved by technology

[0010] 7. Limit file sharing with the network outside the firewall;

The fundamental problems that lead to this situation are: first, before the server is directly exposed to attacks, the client can directly connect to the server; second, the server must passively accept a large number of attacks, and a large amount of resources are used to process attack requests

Images