摘要： 介绍的方法可使网络设备检测出并消除DDOS攻击。通过进出受害者或攻击者数据包流量显著的不平衡特性,网络设备可以检测 出DDOS攻击。采用此方法的网络设备维护一个针对在线数据包的多层树,通过它监视数据包的流量特性。

关键词: 网络, 分布式拒绝服务, 树

Abstract: This paper introduces a method that network devices can use to detect and eliminate such attack. A network device using this method detects on going DDoS attacks by the significant, disproportional difference between packet traffic going to and coming from the victim or the attacker. With the method, each network device maintains a multi-level tree for online packet statistics, that monitors certain traffic characteristics.

中图分类号: 

• TP393.08