×

DDoS攻击实时检测防御系统的硬件实现

消耗积分:5 | 格式:rar | 大小:157 | 2009-06-19

417804

分享资料个

分布式拒绝服务攻击是因特网安全的头号威胁。针对DDoS 攻击,本文介绍了一种基于MPC860 和FPGA 的实时检测防御系统的体系结构与实现原理,探讨了基于非参数累积和(CUSUM)算法检测新IP 地址到达速率变化的DDoS攻击检测方法。实验结果表明该系统不仅实时检测准确性高、在线检测速度快、防御效果好,而且不损失网络信息
吞吐量,保证了合法用户的正常访问。
关键词:DDoS 攻击;FPGA ;CUSUM 算法;实时检测;门限
Abstract: Distributed denial-of-service(DDoS) attacks present an immense threat to the Internet.The paper concentrates on the architecture and principles of the system of real-time detecting and defending against DDoS attack,which is based on MPC860 and FPGA.We propose a scheme to detect the DDoS attacks by monitoring the increase of new IP addresses.We use the non-parametric CUSUM algorithm to detect the change of the
rate of the new IP addresses arriving. Experiment results show that our scheme is characterized by high detection accuracy ,short detection time and good defence effect. Finally ,the mechanism guarantees the usual network throughput efficiently and reliably ,and provides good service to the legitimate traffics during the attack.
Keywords: DDoS attack; FPGA; CUSUM algorithm;Real-time Detection; Threshold

声明:本文内容及配图由入驻作者撰写或者入驻合作网站授权转载。文章观点仅代表作者本人,不代表电子发烧友网立场。文章及其配图仅供工程师学习之用,如有内容侵权或者其他违规问题,请联系本站处理。 举报投诉

评论(0)
发评论

下载排行榜

全部0条评论

快来发表一下你的评论吧 !