Web服务器应用层慢速DDoS攻击防御研究

北京邮电大学学报 ›› 2017, Vol. 40 ›› Issue (s1): 77-80.doi: 10.13190/j.jbupt.2017.s.017

• 论文 • 上一篇下一篇

Web服务器应用层慢速DDoS攻击防御研究

周椿入¹, 刘晓明², 雷敏¹, 武旭东³, 邓诗琪¹

1. 北京邮电大学信息安全中心, 北京 100876;
2. 国家计算机网络应急技术处理协调中心, 北京 100029;
3. 四川科瑞软件有限责任公司, 四川绵阳 621000

收稿日期:2016-05-26 出版日期:2017-09-28 发布日期:2017-09-28
作者简介:周椿入(1993-),男,硕士生,E-mail:zcr214@butp.edu.cn;刘晓明(1979-),男,高级工程师.
基金资助:
国家科技支撑计划课题（2015BAH08F02）

Research on Defense of Slow DDoS Attack on Web Server Application Layer

ZHOU Chun-ru¹, LIU Xiao-ming², LEI Min¹, WU Xu-dong³, DENG Shi-qi¹

1. Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China;
2. National Computer Network Emergency Response Technical Team/Coordination Center of China, Beijing 100029, China;
3. Sichuan Kerui Software Co. Ltd, Sichuan Mianyang 621000, China

Received:2016-05-26 Online:2017-09-28 Published:2017-09-28

摘要/Abstract

摘要： DDoS攻击会导致Web服务器无法向用户提供正常的服务. 应用层DDoS攻击不同于网络层DDoS攻击，所有应用层DDoS请求都是合法的. 慢速DDoS攻击主要利用的是thread-based架构的服务器的特性，这种服务器会为每个新连接打开一个线程. 攻击者和Web服务器建立正常的HTTP连接以后，通过各种方法保持这个连接，从而占用服务器大量的资源. 对应用层慢速DDoS的原理进行分析，并提出了相应的防御方法，能提高服务器抗DDoS攻击的能力，从而有效地提升服务器的安全性能.

关键词: Web服务器, 慢速DDoS攻击, 安全防御

Abstract: Web server can't provide normal service for users under DDoS attack. DDoS attack on application layer is different from DDoS attack on network layer, and each request sent by DDoS attack on application layer is legal. Slow DDoS attack mainly uses thread-based architecture characteristics of Web server. Web server of this type will open a new thread for every new connection. After the attacker has built a normal HTTP connection with Web server successfully, he will hold this connection through all kinds of methods to take up a lot of resources of Web server. The principle of slow DDoS on application layer is analyzed and related defense methods are proposed, which can improve ability to resist DDoS attack of Web server and safety performance.

Key words: Web server, slow DDoS attack, security defense

中图分类号:

TN911.22

周椿入, 刘晓明, 雷敏, 武旭东, 邓诗琪. Web服务器应用层慢速DDoS攻击防御研究[J]. 北京邮电大学学报, 2017, 40(s1): 77-80.

ZHOU Chun-ru, LIU Xiao-ming, LEI Min, WU Xu-dong, DENG Shi-qi. Research on Defense of Slow DDoS Attack on Web Server Application Layer[J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 77-80.

参考文献

相关文章 1

编辑推荐

Metrics

本文评价