Method and device for detecting ddos ​​reflection attack, computer equipment and readable medium

A detection method, reflective technology, applied in security communication devices, digital transmission systems, electrical components, etc., can solve the problems of real-time DDoS reflective attacks, poor sensitivity, and failure to capture, to achieve effective protection and threat early warning, Highly sensitive and real-time, precise protection effect
CN110311925BActive Publication Date: 2022-06-28BAIDU ONLINE NETWORK TECH (BEIJIBG) CO LTD

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
BAIDU ONLINE NETWORK TECH (BEIJIBG) CO LTD
Publication Date
2022-06-28

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides a DDoS reflection attack detection method and device, computer equipment and a readable medium. The method includes: performing protocol decoding on all data packets in the data stream to be detected to obtain various types of data packets; aggregating the data packets of the same type; detecting the data to be detected based on the aggregated data packets of various types Whether there is a DDoS reflection attack of the corresponding type in the flow. The technical solution of the present invention can be detected in time even for a detection type attack with a very small flow rate, and has high sensitivity and real-time performance, so that it can be detected before the DDoS reflection type attack does not cause a large attack event and a major loss. Realize effective protection and threat warning. Moreover, the technical solution of the present invention can determine the type of DDoS reflection attack, and thus can facilitate the realization of more accurate protection.
Need to check novelty before this filing date? Find Prior Art

Description

【Technical field】

[0001] The present invention relates to the technical field of computer applications, and in particular, to a method and device for detecting DDoS reflective attacks, computer equipment and a readable medium. 【Background technique】

[0002] With the booming development of the Internet today, the dark side of the network is also growing day by day, and the offense and defense in Distributed Denial of Service (DDoS) attack scenarios are constantly improving. Hackers hiding in the dark are constantly looking for ways to launch more traffic at a lower cost.

[0003] In order to prevent the damage caused by DDoS attacks, when the traffic of reflection attacks is increasing, it is not only necessary to defend against reflection attacks with large traffic, but also to detect new reflection threats in advance, block and provide defense strategies in time . The current traditional DDoS reflection attack detection scheme judges whether abnormal DDoS traffic occurs ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More