Study on Netfilter-based strategy for preventing DDOS attacks in access controllers

您当前的位置：

首页 >

文章列表页 >

- Study on Netfilter-based strategy for preventing DDOS attacks in access controllers
- Study on Optical communication Issue 5, Pages: 63-66(2013)
- 作者机构：
  
  1. 武汉邮电科学研究院
  2. 武汉虹信通信技术有限责任公司
- 作者简介：
- 基金信息：
- DOI：10.13756/j.gtxyj.2013.05.021
  CLC： TN915.08
- Published：2013，
扫描看全文
[1]孙彧,胡凯.接入控制器中基于Netfilter的防范DDOS攻击策略研究[J].光通信研究,2013(05):63-66.

Sun Yu, Hu Kai. Study on Netfilter-based strategy for preventing DDOS attacks in access controllers. [J]. (5):63-66(2013)
[1]孙彧,胡凯.接入控制器中基于Netfilter的防范DDOS攻击策略研究[J].光通信研究,2013(05):63-66. DOI： 10.13756/j.gtxyj.2013.05.021.

Sun Yu, Hu Kai. Study on Netfilter-based strategy for preventing DDOS attacks in access controllers. [J]. (5):63-66(2013) DOI： 10.13756/j.gtxyj.2013.05.021.

DDOS（分布式拒绝服务）是一种常见的、破坏力强的网络攻击

为了减小其对网络设备的影响

提出一种在接入控制器中基于Netfilter的防范DDOS攻击的策略。结合改良的SYN Cookie（标识握手信号的本地数据）技术

对Linux内核中的Netfilter进行二次开发

实现了针对DDOS中SYN Flood（标识握手信号的洪水攻击）方式的防火墙。测试结果表明:该方案能够有效地防止网络攻击

以较小的性能损失保证TCP（传输控制协议）服务的正常工作

并节约了成本。

Distributed Denial of Service（DDOS）is a common and destructive network attack.In order to minimize its impacts on network equipment

this paper presents a Netfilter-based strategy for preventing DDOS attacks on access controllers.Using the improved SYN Cookie technology

it executes a secondary development of Netfilter in the inner core of Linux

realizing a firewall against SYN Flood in DDOS.Test results indicate that this scheme effectively prevents network attacks

ensures the normal service of TCP with little performance loss and saves cost.

网络过滤器接入控制器分布式拒绝服务标识握手信号的本地数据标识握手信号的洪水攻击

Netfilteraccess controllerDDOSSYN CookieSYN Flood

更多指标>

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

An access controller multi-board communication strategy based on dynamic regulation

Related Author

No data

Related Institution

State Key Laboratory of Optical Communication Technologies and Networks

⁰