DDoS攻击的流程分析与有效防御

• 作 者: 彭劲杰
• 出 处: 微电脑世界
• 发表日期: 2010年07期
• 关键词: DDoS 有效防御 目标机器 攻击包 网络包 网络阻塞 瘫痪状态 流程分析 服务器资源 网络访问

DDoS是Distributed Denial of Service的缩写,意即:分布式拒绝服务攻击。它通过控制一批傀儡机(俗称“肉鸡”)向目标机器同时发起洪流般的攻击,使得服务器应接不暇而无法响应正常的服务,重则使系统处于瘫痪状态。DDoS攻击具有两个重要的特点:一是针对网络带宽进行海量攻击,造成网络阻塞,湮灭正常网络包;二是耗尽服务器资源,大量非正常的攻击包耗尽主机内存和CPU资源。

DDoS is an abbreviation of Distributed Denial of Service, meaning: Distributed Denial of Service attack. It controls a group of puppet machines (commonly known as “chicken”) simultaneously launched a flood of attacks on the target machine, making the server overwhelmed unable to respond to normal service, while leaving the system in a paralyzed state. DDoS attacks have two important characteristics: First, massive attacks against network bandwidth, causing network congestion, obliterate the normal network packet; the second is to run out of server resources, a large number of abnormal attack packets exhausted host memory and CPU resources.