The invention discloses a special
data filtering method for eliminating denial-of-service
attack to DNS (
domain name system) service. The special
data filtering method includes steps of firstly, capturing a
network data sample of a DNS
server; secondly, extracting characteristic attributes of the captured
network data sample; thirdly, determining a
time function which is a piecewise
time function; fourthly, creating a training
data matrix of a normal flow and a
train data matrix of an
attack flow according to the captured
network data sample; fifthly, continuing capturing traffic data packets on the DNS
server in real time, and classifying and detecting the traffic data packets by a
Bayes classifier; sixthly, filtering classification results, judging whether a data flow is the
attack flow or not, completely abandoning the data flow if the data flow is the attack flow, and adopting a filtering method based on classification probability according to the congestion condition of the DNS
server if the data flow is the normal flow; and seventhly, turning to the fifth step to carry out the same process. By the special
data filtering method, data are filtered and processed after the denial-of-service attack flow is detected, and influence of the denial-of-service attack on the DNS server is eliminated.