A method and related device for protecting against distributed denial-of-service attacks

Abstract

The application discloses a protection method and related devices for distributed denial-of-service attacks, which are used to realize protection against DDoS attacks through self-defined protection strategies in the face of complex and changeable attack methods and various business scenarios. The application method includes: when an attack alarm is received, if the custom expression does not exist in the configuration file preset by the protection device, then read the custom expression in the database, and the custom expression is dynamically configured with a protection strategy; The protection device sends a custom expression to make the protection device store the custom expression in the configuration file. The custom expression is used to instruct the protection device to call the function module that matches the protection policy to clean the traffic flowing to the target network address. The matching functional modules include at least two functional modules divided according to preset rules in the protective device.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular to a method for protecting against distributed denial-of-service attacks and related devices. Background technique [0002] Distributed Denial of Service (DDoS) attack means that hackers use DDoS attackers to control multiple computers to attack simultaneously to achieve the purpose of "preventing normal users from using services". Generally, DDoS attacks can be divided into two categories: network layer attacks and application layer attacks. Network layer attacks are also called traffic-based attacks. At present, DDoS attacks have become one of the common high-harm security threats, and the main reasons for DDoS attacks are pranks, vicious competition, extortion, political factors and other reasons. DDoS attack is the most common way to affect the normal operation of the enterprise network. The biggest harm it brings is the loss of business due to unavailabl...

AI Technical Summary

Problems solved by technology

[0004] However, the various functions of the existing ADS system are relatively independent, and cannot effectively protect against complex and changeable attack methods and various business scenarios on the live network.

Images