【摘要】 主动DDoS防御系统(ADDS)主要防御基于网络的DDoS攻击。使用体系防御技术组织防火墙、路由器和中心主机共同防御,弥补了防火墙、路由器和内核级防御程序单独防御的不足;使用分区超时技术使系统具有快速防御DDoS的能力;使用流量分析技术控制路由器,优化网络流量分配;使用连接验证技术消除傀儡机的攻击。多种技术和多层次的防御使系统具有较强的防御DDoS攻击能力。更多还原

【Abstract】 Active DDoS Defense System(ADDS) implements technique of architecture defense to integrate routers, firewalls and the host to defend DDoS attacks;compensates the deficiencies of separated defenses made by routers,firewalls or kernel defense programs;implements multi-segment timeout to reinforce system defense against DDoS attacks;implements technique of net flow analysis to control routers for optimizing net flow distribution;implements authorization to eliminate DDoS attacks made by agents.The application of multiple technology and multilayer defense develops capacity against DDoS attacks.更多还原