【摘要】 分布式拒绝服务攻击利用了Internet的弱点,攻击方式非常有效,而且非常难以抵挡。因为它们产生的是合法的流量和数据请求,所以很难检测到真正的攻击来源。通过分析一种DDOS攻击类型—SHAFT,展示其工作原理。SHAFT是一种独立发展起来的DDOS攻击方法,根据分析可以发现它还在发展之中,有几个关键特性表明了它的进化方向,其中最重要的是:包统计,以及改变受控主机的选择。密码与“ticket”的匹配也可能成为其进化的一个方向。更多还原

【Abstract】 Distributed Denial of Service Attacks have used the weaknesses of the Int ernet.They are very effective,and can not efficien tly defend,because what they genera ted are legal traffic and data re-quest.This paper attempts to explain the principle of their work,by analysis one type of DDOS,SHAFT.“Shaft”is a variant of DDoS with independent origins.The analysis appears that i t is still in development.Several key features indicate evolu tionary trends as the genre develops.The most important is the statistic s placed on packet,and handler host’s selection.The use of encryption of its control traffic is also a possi-ble direction of its development.更多还原