Normal Distribution and Active Denial-of-Service Defense Mechanisms
Zheng Ni · Computer Technology and Development · 2006
As the development and prevalence of information technology,network security is currently a hot issue in the Internet.The DDoS is becoming a serious problem to affect the running of the Internet by preventing legitimate users of a service from using the desired resource.The theory of DDoS is introduced at first in this paper.Then discuss the countermeasures and mechanism of DDoS.Relying on SSFNet simulation software,sets up corresponding network environment,and simulates a DDoS attack.Whereafter,regarding remarkable characteristics of the attack found in the experiment,namely the normal distribution trend which is presented by the number of new IP addresses passing the router,and combining with normal distribution probability theory in statistics,it comes up with an active defense scheme against DDoS attack.Subsequently,by taking advantage of collected data and integrating with abnormity detecting method raised from the scheme,it tests the validity of DDoS defense scheme.