【摘要】 概述了因特网上DoS攻击的相应分类及基本特征 ,评述了包过滤、攻击检测及防御技术的最新成果 .前一部分介绍了入口过滤、基于路由的过滤网和有效源地址强制协议 .后一方面主要讨论了适合于检测攻击包的技术 ,介绍了新近提出的频谱分析方法和泛滥检测系统 .简要评述了已有的防御SYN泛滥攻击的技术措施 ,介绍了Cisco的TCP拦截技术 ,提出了改进策略更多还原

【Abstract】 For the DoS attacks on Internet, the basic circumstances and their classification are outlined. The contents include the packet filtering and the attack detection together with prevention techniques of the SYN flooding attacks. For the prevention of SYN flooding attacks, the Cisco TCP interception technique and the corresponding improvement scheme are suggested.更多还原