基于可信度的App-DDoS攻擊的分布式流量控制模型

針對(duì)應(yīng)用層分布式拒絕服務(wù)（application layer DDoS,簡(jiǎn)稱(chēng)App-DDoS）攻擊的特點(diǎn)，
結(jié)合流量控制技術(shù)，應(yīng)用可信度的概念和分布式處理的思想，提出了基于可信度的App-DDoS攻擊的分布式流量控制模型。該模型以正常用戶(hù)的服務(wù)請(qǐng)求數(shù)據(jù)分布規(guī)律作為計(jì)算可信度的依據(jù)，利用多層次結(jié)構(gòu)，在網(wǎng)絡(luò)拓?fù)涞牟煌?jié)點(diǎn)上實(shí)現(xiàn)流量控制，從而實(shí)現(xiàn)了在防御App-DDoS 攻擊的同時(shí)，降低了對(duì)網(wǎng)絡(luò)性能的影響。
關(guān)鍵字：應(yīng)用層分布式拒絕服務(wù)；流量控制；可信度；服務(wù)請(qǐng)求數(shù)據(jù)分布規(guī)律

Distributed flow control model of the App - DDoS attacks based on the credibility LONG Shi-gong [1], ZHAO Meng-long [2] (Institute of Computer Software and Theory, Guizhou University, Guizhou Guiyang, 550025)Abstract: The application layer distributed denial of service (application layer DDoS, referred to as App-DDoS) attack characteristics, combined with flow control technology, the applications of credibility and the thought of distributed processing, made Distributed flow control model of the App-DDoS attacks based on the credibility. The model calculated the credibility with the normal user's service request for data distribution and achieve flow control in different nodes of the topology network with multi-level structure,thus not only achieve the defense against the App-DDoS attack at the same time, but also reduced the impact on performance of network.
Keywords: application-level distributed denial of service ； traffic control ；
credibility； service request for data distribution services