论文部分内容阅读
随着网络技术的发展,网络安全问题也日趋严重,作为典型的DDOS攻击方式,SYNFlood攻击因为其隐蔽性和高效性颇受攻击者青睐,更为严重的是,现在尚无完全令人满意的防护手段,单一的防范手段往往达不到安全防范的效果;文章以典型攻击为案例,在系统分析现有的常规防御技术手段的基础上,结合相关安全管理策略,设计了一套涉及预防、监控/识别、安全加固调整和恢复等关键环节的综合安全解决方案;实际运行表明,按照本方案防护的系统在攻击实施时仍然能够提供正常的服务。
With the development of network technology, the problem of network security is becoming more and more serious. As a typical DDOS attack mode, SYNFlood attacks are favored by attackers because of their covertness and high efficiency. What is more serious, there is not completely satisfactory In the case of typical attacks, based on the systematic analysis of existing conventional defense techniques and based on the relevant safety management strategies, a set of measures is put forward that involves the prevention, Monitoring / identification, security hardening adjustment and recovery and other key aspects of the integrated security solution; actual operation shows that the protection system in accordance with this program can still provide normal service in the attack.