Method based on active network returning technology against refuse service attack

Abstract

A method for preventing the denial of service attack based on backtracking technology with active network belongs to the information security technology field. By using dynamic allocation mechanism based on active network and combining backtracking technology, the invention builds the active backtracking system at each node in the attacked server, first makes the pre- judgement to the node, then judges the attacking algorithm, judges the target node in the packet header and other information, then makes defense backtracking, traces and eliminates the source of attack, finally eliminates the denial of service attack.

Description

technical field [0001] The invention relates to a method for defending against denial of service attacks, in particular to a method for defending against denial of service attacks based on active network backtracking technology. It belongs to the field of information security technology. Background technique [0002] Denial of service attack (DoS) sends a large number of service requests to the attacked host or other network devices in a very short period of time, causing the connection list of the target host to overflow, so that the target host cannot normally respond to other legitimate service requests. At present, there are many methods of defense denial of service attacks based on backtracking in the world, including entry debugging, controlled attacks, and IP marking adopted by the border, etc. (Stefan Savage, David Wetherall, Anna Karlin and Tom Anderson: Practical Network Support for IP Traceback. SIGCOMM2000Sweden: ACM, 2000.295~300), (Network Model Supporting IP ...

AI Technical Summary

Problems solved by technology

For example, in the debugging method, it will take a lot of time and energy for the attacked host to contact the network administrator, and this method only works when the attack occurs; the controlled attack method itself is a denial of service attack, and requires Knowing exactly the topology of the network, at the same time, has little effect on preventing distributed denial of service attacks; and the IP marking method adopted by the border adds additional information to the packets being transmitted, which increases the load of the transmission packets, which is expensive and expensive. There may not be enough space for this information in the , information may be lost

Images