拒绝服务攻击和自相似网络流量研究-计算机应用技术专业毕业论文.docxVIP

ii ii 浙江大学硕士学位论文 Abstract Abstract With the increasing pop川剧ty of Intemet technology and development ，network and peoples daily lives are ge饥ing c1oser. In性le early development of the Intemet for discussions on network security hωnever stopped，and as peoples growing dependence of computer networks，network security today is even more impo口ant.The current network intrusion incre嗣同 frequency，也e 巾吨er of invasion is a1so growi吨， especia11y the consumption of network resources intrusions intensified. DoS (denia1 of service，Denia1 of Service) attack against the va1idiψof Web services as a damage and the victim host or network ωn not be outside in time to receive and process a request， 。，r unable ωrespond to outside req阴阳， and 由us can not provide norma1 serviωto legitimate users to form a denia1 of service. DDoS (Distributed Deny of Service) attacks is 由e use of a sufficient number of proxy machines generate a huge number of attack packets to one or more targets for DoS attacks，draining the resources of the inj町ed side，so that 由e loss of the inj町ed host ωprovide norma1 network s町vices. DDoS attack is currently the most serious threatsωnetwork security is one of the cha11enges of network availability. Facing increasingly sev田e DDoS attack， how to prevent DDoS attacks have become a Han to be resolved. In this paper，DDoS attacks on background to the study，ana1yzed the causes of DDoS a饥acks，introduced the technica1 principle of DDoS attacks，attack and severa1 attack tools works. And then describes the response to DDoS attacks，DDoS attack detection， packet filtering，attack path 衍肌ing，severa1 mainstream technologies such 础 honey pot. ηlen introduced the self-similar theory in DDoS a饥ack detection in the field of application， analysis of severa1 self-similar network traffic model and severa1 calculation method of Hurst coefficient. Based on the above for low-speed DDoS a忧acks，也is paper presents a H町st coeffi