DDOS attack detection method with high accuracy

Abstract

The invention discloses a high-accuracy DDOS attack detection method, which belongs to the field of computer network security. The method is as follows: the data packet interception module analyzes the access network data packet information; the data packet feature statistics module performs statistics on the parsed network data packet information; The proportion distribution of the total number of packets; the data analysis module calculates the alarm threshold of network data according to the calculated historical data stored; Submit it to the attack analysis module; the attack analysis module generates a detection report according to the received network data value. Compared with the prior art, the present invention integrates the historical data of network transmission, deeply analyzes the current network data, and can identify various DDOS attacks.

Description

technical field [0001] The invention relates to the field of computer network security, in particular to a high-accuracy DDOS attack detection method. Background technique [0002] Denial of Service attack, English Denial of Service (DOS), as a means of attack on the Internet, has a long history, mainly using the defects of the TCP / IP protocol to exhaust the resources of the network providing services, resulting in Failure to provide normal services is a malicious attack that is extremely harmful to the network. Some denial-of-service attacks consume bandwidth, some consume the CPU and memory of network devices, and some cause system crashes. Representative attack methods include SYN flood, ICMP flood, UDP flood, etc. [0003] Initially, the attack is generally based on a single computer attacking the target, which is what we often call a DOS attack. With the development of technology, the current attack technology has developed from the DOS mode to the DDOS mode, that is, ...

AI Technical Summary

Problems solved by technology

So far, there is no good technology to thoroughly detect and defend against denial of service attacks