探索了SYN Flooding攻擊的特征，提出了判斷攻擊發(fā)生的關(guān)鍵指標(biāo)。介紹了網(wǎng)絡(luò)測量系統(tǒng)的架構(gòu)，詳細(xì)闡述了具有服務(wù)保護與攻擊消除功能的檢測方法、攻擊源追蹤方法。最后分別給出了驗證檢測機制和追蹤機制的實驗與結(jié)果。
關(guān) 鍵 詞 拒絕服務(wù); SYN Flooding攻擊; 網(wǎng)絡(luò)測量; 地址追蹤

Abstract In this paper, the characteristics of SYN flooding attack are explored, some key metrics of judging this kind of attack are proposed. Thereafter, an introduction of the architecture of network measurement system is introduced. Then the detecting method with the features of service-protected and attack-removed, the method of tracing the source of attack are expatiated in detail. Finally, the experiments for validating the mechanisms of detecting and tracing attacks are given.
Key words denial of service; SYN Flooding attack; network measurement; IP traceback