An Approach to Detecting and Filtering DDoS Attack in IP Metropolitan Area Network
Lu Hua · Guangxi Communication Technology · 2008
In recent couple years,the distributed denial of service(DDoS) has became a kind of network abnormal traffic with high frequency,DDoS attack not only results in the victim's internet services interrupting,but also poses a grave threat to network security of IP metropolitan area backbone network.from the telecom carriers' standpoint,with analyzing the characteristics of DDoS attacks which endanger the safety of IP metropolitan area network,based on comprehensive consideration of the characteristics of attacks,the current situation of technology and investment cost,a solution for detecting and filtering DDoS attacks in IP metropolitan area network is proposed.The trial application results show that this solution could significantly improve response ability of DDoS attack in carrier-class IP metropolitan area network.