【摘要】 介绍了分布式拒绝服务攻击的原理及与其相关的入侵检测和防范对策，提出了针 对SYN泛滥攻击，采用TCP拦截扩散策略，由可信赖网络内的多个路由器代替受攻击的单个路 由器完成过滤防御任务，并对此策略的特点和效率作了一定分析。更多还原

【Abstract】 The paper introduces the theory of distributed denial of service, in trusion detection and defense strategy. And it shows a strategy using diffusible TCP interception to withstand SYN-flooding. In a trusted-network, several route rs help the single attacked-router to finish the work of interception. Analysis of characteristic and efficiency of the strategy is given.更多还原