Low-rate Denial-Of-Service Detection and Defense for TCP Congestion Control
Zhu Dong-zhao · Jisuanji gongcheng · 2010
Traditional Low-rate Denial-Of-Service (LDOS) attack detection and defense method for TCP congestion control is complicated to compute and difficult to implement. A fast and simple detection and defense way is put forward based on the distributed detection mechanism proposed by others. Detect and extract characteristic values of attack pulse with digital signal processing technology, melts attack risks. Result shows that the method is accurate and fast. The new system has real-time alarm function and has not any complicated filtering algorithm and data lost.