Active suppression method and device for malicious traffic attack of heaven and earth convergence network

Abstract

The invention provides an active suppression method and device for malicious traffic attacks of a heaven and earth convergence network, and the method is applied to a heaven and earth convergence network system which comprises a plurality of network devices which are sequentially connected. Each network device executes the following steps: each network device obtains respective legal traffic and respective total traffic; each network device determines a filtering probability and a filtering threshold value based on the legal traffic and the total traffic; and under the condition that the total flow is higher than the filtering threshold value, filtering the received data packets by the filters corresponding to the network devices one by one based on the filtering probabilities. According to the heaven and earth convergence network malicious traffic attack active suppression method and device provided by the embodiment of the invention, the traffic is filtered through a plurality of filters in one-to-one correspondence with the network equipment, and the malicious traffic attack is effectively suppressed.

Description

technical field [0001] The invention relates to the technical field of network security, and in particular, to a method and device for actively suppressing malicious traffic attacks in a world-earth fusion network. Background technique [0002] The space-ground fusion network is based on the ground network and extended by the space network, covering natural spaces such as space, air, land, and ocean, and providing information guarantee for the activities of various users such as space-based, space-based, land-based, and sea-based. infrastructure. Malicious traffic attacks (such as DDoS) are one of the major security risks that threaten the security of the integrated cyberspace. In malicious traffic attacks, attackers hijack botnets to send junk traffic or malicious traffic to victims, exhausting the victim's network resources and threatening the normal use of the victim's network. [0003] At present, for malicious traffic attacks, passive defense methods based on a single...

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a method and device for actively suppressing malicious traffic attacks in a space-earth fusion network, which is used to solve the defect of low efficiency of defense against malicious traffic in the space-ground fusion network in the prior art, and to effectively suppress malicious traffic attacks in space-ground fusion

Images