【摘要】 分布式拒绝服务攻击(DDoS)已经成为互联网最大的威胁之一。提出了一种基于IntelIXP1200网络处理器平台的DDoS防御系统的设计方案,并实际实现了一个防御系统D-Fighter。提出了解决DDoS攻击的两个关键技术:数据包认证和细微流量控制的原理和方法,并在D-Fighter中设计实现。经过实际网络测试环境的应用测试表明,D-Fighter达到了设计目标,对DDoS攻击的防御有较好的效果。更多还原

【Abstract】 Distributed Denial of Service (DDoS) attack is one of the biggest threats to Internet. This article puts forward a designing scheme of defending against DDoS attacks based on the Intel network processor platform--IXP1200, and it has implemented in a practical defense system--D-Fighter. Two key techniques of data packets authentication and granular traffic control for defending against DDoS attacks are proposed and adopted in the design of D-Fighter. At last, the application test in practical network test environment shows that D-Fighter meets the designing requirements and it has a better protective effect against DDoS attacks.更多还原