A working method for locating a distributed network security attack prevention system

Abstract

The invention relates to a working method for positioning a distributed network security attack defense system, which is used for directional defense against an attack area and an attacked area. The method comprises the following steps: a wide area controller obtains topology information of the whole network through an information flow collection module; a network topology information collection module obtains topology information of the whole network through the information flow collection module. The wide area controller calculates the packet update rate of the topology information through the flow analysis module; the wide-area controller judges whether the packet update rate exceeds its own processing rate. If so, the wide-area controller tracks the location of the information source of the partial topology information in the reverse direction through the location module. The wide area controller obtains the network configuration within a certain range through the configuration module according to the information source positioning; the GPS positioning device certifies each equipment; the terminal connecting device temporarily connects each device to any signal station. The regional equipment configuring machine matches the processing speed of each equipment according to the packet updating speed. The area device configuring machine transmits topology information having a corresponding packet update rate to the corresponding device.

Description

technical field [0001] The invention relates to the field of network security, in particular to a working method for locating a distributed network security attack defense system. Background technique [0002] With the rapid development and in-depth application of computer science and technology, changes in cyberspace are constantly changing and affecting people's way of life. As people rely more and more on the Internet, many confidential information about enterprises, individuals, and even countries are involved on the Internet, so the issue of network security has always been an important topic in the process of technological development. Among the many network attack methods existing on the Internet at present, Distributed Denial of Service Attack (Distributed Denial of Service Attack, DDoS for short) is the most common and highly destructive attack method. Most distributed denial-of-service attacks come from botnets, which cooperate with each other to launch denial-of-...

AI Technical Summary

Problems solved by technology

[0004] Due to the simple method of DDoS attack and strong concealment, so far, there is no means to completely defend against this kind of attack; The defense of DDoS attack, the problem of being unable to make effective defense and counterattack to the attack in time under the attack of widely distributed DDoS like this, the present invention provides a kind of working method of computer anti-theft information system based on displacement

Images