Distributed denial of service attacks are still a big threat to the Internet. Several proposals for coping with the attacks have been made in the re cent past, but neither of them is successful on themselves alone. This paper int roduces the implementation and function of the honeynet——A system-proactive pr otecting technology based on the analysis of DDoS attacks and presents the idea using the honeynet system to protect the network avoiding the DDoS attacks, and fulfills the design and implementation.
【基金】
中国科学院知识创新工程重大项目(KJCX1-09)
【更新日期】
2005-08-19
【分类号】
TP393.08
【正文快照】
1 概述2000年2月发生的Yahoo、亚马逊书店、eBay、CNN、Buy等多个国际著名网站被拒绝服务(Denial of Service,DoS)攻击风暴袭击而中断服务数小时[1]的黑客事件,使人们逐渐认识和了解了DoS攻击危害的严重性。由于从Internet上可以方便地下载很多攻击工具,这就使得发起DoS或分布?