Abstract: With the development of network technology,network security can earlier expose to DoS attack.This paper introduces the principle and usual methods of DoS/DDoS attack, and proposes the design and implementation of Linux-gateway-based DoS/DDoS protection system. The system integrates the anti-scanning and anti-trace, stateful packet inspection, intrusion detection and protection technology. It can resist the usual attack of net scan and DOS/DDOS efficiently.

摘要： 随着网络应用的普及和深入,拒绝服务攻击对网络安全的威胁日益增加。文章介绍了DoS／DDoS攻击原理及常用的攻击手段,提出 了一种基于Linux网关的DoS／DDoS防护系统的设计与实现。在这个系统中,设置了反扫描跟踪、TCP连接监控、状态检测、入侵检测与防护4 道关卡,有效地抵御了常见的网络扫描与DOS／DDOS攻击。

关键词: DoS, DDoS, DRDoS, 状态检测, 入侵检测

CLC Number: 

• TP393.08