Defense system and method for Internet-of-Things system to resist DDOS attack

Abstract

The invention discloses a defense system and method for an Internet-of-Things system to resist DDOS attack. The defense system includes two or more different server groups, wherein an Internet-of-Things system terminal is connected with the two or more different server groups via more than one wireless narrow band, the two or more different server groups work in parallel, and the two servers are connected with the same database. The Internet-of-Things system terminal in the defense system for an Internet-of-Things system to resist DDOS attack can be connected to two different server groups through one or two wireless narrow bands (two shown in the figure), two groups of connections (terminal-to-server) work in parallel, a first-come-first-served management mode is adopted for analysis andacquisition of data, the two server groups operate one database, and at the moment, even if one server group is attacked or down, the system still can work normally without being affected.

Description

technical field [0001] The invention relates in particular to a defense system and method for an Internet of Things system to deal with DDOS attacks, and belongs to the technical field of network security. Background technique [0002] Distributed denial of service (DDoS) attack is a common type of network attack. It uses client / server technology to combine multiple computers as an attack platform to launch DDoS attacks on one or more targets, thereby multiplying The power of denial of service attacks. With the development of cloud computing, the number of IoT devices is huge, and IoT devices have poor virus defense capabilities and strong destructive power after failure. These characteristics provide a hotbed for DDoS attacks. That is to say, in the IoT environment, IoT The huge number of networked nodes and IoT devices affect all aspects of real life, making DDoS attacks in the IoT environment more threatening and have a wider impact. For DDoS attacks, traditional soluti...

AI Technical Summary

Problems solved by technology

With the development of cloud computing, the number of IoT devices is huge, and IoT devices have poor virus defense capabilities and strong destructive power after failure. These characteristics provide a hotbed for DDoS attacks. That is to say, in the IoT environment, IoT The huge number of networked nodes and IoT devices affect all aspects of real life, making DDoS attacks in the IoT environment more threatening and have a wider impact

For DDoS attacks, traditional solutions include host or network-based detection, CDN services, and telecom operator-based traffic cleaning and IP address blocking. However, these methods are unable to defend against DDoS attacks in the Internet of Things environment.

In addition, Huawei provides an agile solution for the Internet of Things. This solution mainly uses technologies such as authentication management, authorization management, and terminal identification to strengthen terminal security, and manages the network through authorized VLANs, ACLs, QoS, and user group authorization. This solution can To strengthen terminal security, there is a controller for global policy configuration, but its disadvantage is that it requires more cost to purchase defensive equipment, and uses multiple policy configurations, and the environment configuration is cumbersome

Images