摘要： 介绍了分布式拒绝服务攻击的原理及与其相关的入侵检测和防范对策，提出了针 对SYN泛滥攻击，采用TCP拦截扩散策略，由可信赖网络内的多个路由器代替受攻击的单个路 由器完成过滤防御任务，并对此策略的特点和效率作了一定分析。
关键词:
可信赖网络,
DDos,
SYN泛滥,
TCP拦截
Abstract: The paper introduces the theory of distributed denial of service, in trusion detection and defense strategy. And it shows a strategy using diffusible TCP interception to withstand SYN-flooding. In a trusted-network, several route rs help the single attacked-router to finish the work of interception. Analysis of characteristic and efficiency of the strategy is given.
中图分类号:
金光,赵一鸣,沈明昕,钱家麒. 可信赖网络中的TCP拦截扩散策略[J]. , 2004, 30(01): 122-124.
JIN Guang1,ZHAO Yiming1,SHEN Minxin1,QIAN Jiaqi2. Diffusible Strategy Based on TCP Interception in Trusted-network[J]. , 2004, 30(01): 122-124.