1、中國(guó)科學(xué)院計(jì)算技術(shù)研究所碩士學(xué)位論文DDoS攻擊檢測(cè)和響應(yīng)技術(shù)研究姓名：韓勇申請(qǐng)學(xué)位級(jí)別：碩士專(zhuān)業(yè)：計(jì)算機(jī)軟件與理論指導(dǎo)教師：白碩20050601DDoS攻擊榆硎jil響廓技束研究：AbstractResearchonTechniquesforDDoSAttackDetectionandResponseHanYong(ComputerSoftwareandTheo啪DirectedByBaiShuoDistributeddenial—o

2、fservice(DDoS)attackshavebeenoneofthemostthreatstotheInternetTheseattacksarelaunchedeasilybuttheirimpactisterribleADDoSattackischaracterizedbyanexplicitattemptbyattackerstopreventlegitimateusersfromusingaserviceSoithasca

3、usedgreatfinanciallossandrestrictedthenetworkdevelopmentThisdissertationsystemicallyaddressesthemainDDoSattackmethods，architecture，processesandtoolsThenweilluminatetheresearchstatus，basictheoryandsometypicalmethodsofDDoS

4、aaackdetectionandfilteringThisdissertationfocusesonthetechniquesforDDoSattackdetectionandresponse，aimingatcoreorbackbonenetworkforblockingormitigatingDDoSattacksthatmightthreatallIntcrnetTodetectandrespondmoreexactlywedi

5、videthebackbonenetworktrafficintofourkindsofflows：TCPUDPICMPandOthersBasedonthecharacterofflowsandtheirproportioninthetraffic，weproposedetectingmethodsandresponsestrategiesforeachflowAndinthisdissertationweproposeasystem

6、modellooselydistributedforDDoSattackdetectionandresponseMoreoverweprovethevalidityofourdetectingmethodsandresponsestrategiesthroughaddingrealDoSattackdatatealbackbonenetworkflowdataWealsobuilda210nodethree—levelnetworkby

7、using]nternettopologygeneratorforlargescalesimulationsBymodifyingsomesourcecodesofns2，wetestourdetectionandresponsesystemmodelundervariousTCPandUDPDDoSattacks，Onthebasisoftheresultsdisplayandanalysis，oursystemhasbeenprov