Resource adaptation resolution server DDoS attack detection defense method in smart collaborative network

Abstract

The invention provides a resource adaptation resolution server DDoS attack detection defense method in a smart collaborative network. The method comprises the following steps: when a data packet transmission condition in the smart collaborative network conforms to a connection migration condition, migrating the connection between a network component and the resource adaptation resolution server toa cache server, and connecting the cache server to the resource adaptation resolution server; receiving and caching a service request packet sent to the resource adaptation resolution server by the network component by the cache server, and detecting whether the resource adaptation resolution server is subjected to the DDoS attack according to a feature tuple of the service request packet by using a decision tree algorithm; and after detecting the DDoS attack, forwarding the service request packet in a differentiated way by using a defense strategy based on a weight priority queue. Accordingto the resource adaptation resolution server DDoS attack detection defense method in the smart collaborative network provided by the invention, a binary tree branch is established by using the decision tree detection algorithm and combining a plurality of feature properties, and feature extraction is carried out on whole network service request information, thus the attack state can be judged moreaccurately, and defense measures can be taken in time to alleviate the influence brought by the DDoS attack.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a DDoS attack detection and defense method for a resource adaptation analysis server in a smart collaborative network. Background technique [0002] Since the Internet appeared in the past few decades, it has had a huge impact on the development of human society. However, with such a rapid development of the Internet, the traditional Internet architecture gradually exposes scalability, mobility, security, controllability, green energy saving, etc. rooted in the original design ideas due to its static and rigid characteristics. Due to these problems, it cannot meet the communication needs of future networks such as "high speed", "high efficiency", "intelligence" and "energy saving". At the same time, the fully distributed architecture of the traditional Internet makes network management complex, and this complexity also leads to the vulnerability of the network, which br...

AI Technical Summary

Problems solved by technology

[0012] The disadvantage of the second resource adaptation and analysis server DDoS attack defense method in the above-mentioned prior art is: the method uses the controller to verify the source address, and then sends the corresponding flow rules to filter the data packets, increasing the In addition to overhead, it also causes a certain delay

When the controller is under attack, this scheme will not be effectively implemented

Images