摘要： 各种“洪水式”拒绝服务攻击比较容易检测,但却难于防范,因为它们是通过一种简单、自然、 “正常”渠道发起的攻击。该文从协同防御的角度论述了入侵防御技术,设计了将入侵检测系统与路由器通过利用入侵防御协议(IPP)相互协同的框架模型。

关键词: 拒绝服务攻击, 入侵防御, 入侵防御协议

Abstract: The kinds of "flood" denial of service attack are easy to he detected, but difficult to prevent, because they use the simple, nature, "normal" way to attack. This paper discusses the intrusion prevention technique from the aspect of joint prevention. It designs a framework about cooperation between IDS ami router using the intrusion prevention protocol(IPP).

中图分类号: 

• TP393.08