摘要： 分布式拒绝服务（DDoS）攻击对Internet仍然是一个严重的威胁，针对这种攻击 手段，人们提出了许多解决方法，但都没有取得令人满意的结果。该文在分析DDoS攻击技术 的基础上，介绍了陷阱系统这一主动防御技术的实现原理及功能，提出了利用陷阱系统来保 护网络免受DDoS攻击的思想并进行了设计和实现。

关键词: 分布式拒绝服务, 陷阱系统, 蜜罐, 停火区

Abstract: Distributed denial of service attacks are still a big threat to the Internet. Several proposals for coping with the attacks have been made in the re cent past, but neither of them is successful on themselves alone. This paper int roduces the implementation and function of the honeynet——A system-proactive pr otecting technology based on the analysis of DDoS attacks and presents the idea using the honeynet system to protect the network avoiding the DDoS attacks, and fulfills the design and implementation.

中图分类号: 

• TP393.08