檢測(cè)基于TCP協(xié)議的DDoS攻擊的相關(guān)性分析模型研究.pdf

1、西南交通大學(xué)碩士學(xué)位論文檢測(cè)基于TCP協(xié)議的DDoS攻擊的相關(guān)性分析模型研究姓名：李艷雙申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：密碼學(xué)指導(dǎo)教師：唐小虎20090501西南交通大學(xué)碩士研究生學(xué)位論文第1I頁AbstractWiththesignificantdevelopmentoftheInternettechnologiesandtheapplicationofnetworks，NetworkSecurityisbecomingmoreandmore

2、importantDenialofService(DoS)Attackisoneofthegreatestdifficultiesinthenetworksecurityarea，becauseitiseasytooperate，hardtoprotect，anddifficulttotraceTCP／IPisthemostpopularprotocolmodelintheInternetapplicationHoweverattheb

3、eginningofthedesignofTCPthereisnoconsiderationofsecurityTCP／IP’SbroadutilizationanditsconnaturaldefectsleadtoplentyofTCP—BasedDDoSattacks，whichhavedramaticallydamagedtheavailabilityofIntemetThus，researchonTCP—BasedDDoSat

4、tacksisofgreatimportanceThisthesisismainlydevotedtotheintensivestudyonTCPBasedFloodingattacksandcomingupwithaneffectiveprotectionproposal，withtheemphasisonthedesignofthedetectionalgorithmFirstlythisthesisanalyzesindetail

5、TCP—BasedDDoSattacksandthesuperioritiesanddeficienciesofthepresentapproachesfortheattacksdetection，inparticularTCPThreewayHandshake，SYNFlooding，ACKFlooding，ConnectionFlooding，SYNcookie，SYNcache，SYNProxyandotherstatistica

6、l—baseddetectingalgorithmsThen，inspiredbytheCovarianceAnalysisModelforDDoSAttackDetection，weproposeadetectionmodelwhichisbasedonthechangesofTCPflags’correlationThroughdetectingthechangesofeverytwoflags’correlation，wecann

7、otonlyfindwhetherafloodingattackOccurs，butalsoidentifywhichkindoffloodingattackistakingplaceSubsequentlyaccordingtotheidentifyresultwetakeeffectiveactionstocontrolcorrespondingattacksFinallywedemonstratedtheperformanceof

8、theDetectionModelthroughseveralexperimentsunderlaboratoryconditionsExperimentationresultsindicatethattheDetectionModeliseffectiveindetectingtheTCPBasedFloodingDDoSAttacksanddistinguishingtheattacktypeThisishelpfulininfor