Data collection method and system capable of achieving DDoS defense

Abstract

The invention relates to a data collection method capable of achieving DDoS defense, and the method comprises the steps: randomly distributing a sub-domain name for an HTTP request code; receiving an HTTP request sent by the HTTP request code to a data collection server; monitoring the network access flow of the distributed sub-domain name from the HTTP request code, modifying the resolving rule of the sub-domain name in a DNS when the network access flow of the distributed sub-domain name exceeds an early-warning value, and enabling the sub-domain name not to point to the IP address of the data collection server. The invention also relates to a data collection system capable of achieving DDoS defense.

Description

technical field [0001] The invention relates to the communication field, in particular to a data collection method capable of defending against DDoS. The present invention also relates to a data collection system, in particular to a data collection system for defending against DDoS based on wildcards. Background technique [0002] A denial of service (DoS) attack is an apparent attempt by one or more attackers to prevent or impair legitimate use of host computers, routers, servers, networks, etc. While such attacks can be launched from within the target network itself, the vast majority of attacks are launched from external systems and networks connected to the target via the Internet. Today, Internet-connected devices, systems, and networks are facing rapid expansion and the real threat of DoS attacks. Such attacks not only harm the intended target, but also threaten the stability of the Internet itself. [0003] Early DoS attack techniques involved simple tools for gene...

AI Technical Summary

Problems solved by technology

While such attacks can be launched from within the target network itself, the vast majority ...

Images