Refused service attack protection method, network system and proxy server

Abstract

The invention discloses a refusing service attacks protection method, a network system and a proxy server. Through intercepting a connection request packet, the invention obtains the source address of the connection request packet through the analysis and queries the legality of the matching connection request packet. To the connection request packet which cannot determine the legality, an agent objective end responses to the requests of clients, filters out the refusing service attacks and judges the address of the objective end according to the legal connection request response packet. The connection between the agent objective end and the objective end is constructed to realize the refusing service attacks protection. The invention can finish the integrated protection of local and remote servers.

Description

technical field [0001] The invention relates to the field of network security, in particular to a denial of service attack protection method, a network system and a proxy server. Background technique [0002] With the further popularization of broadband networks, many network service providers such as government websites, information service providers (Internet Server Provider, ISP), hosting computer rooms, commercial sites, game servers, and chatting sites have been attacked by Denial of Service (DOS) or Troubled by Distributed Denial of Service (DDOS), the main impact of DOS and DDOS attacks is that the network database cannot be used normally, the server is invaded, the confidential information is lost, and some related problems, even some large websites Totally paralyzed. [0003] DOS is the abbreviation of Denial Of Service, that is, denial of service. The attack behavior that causes DOS is called DOS attack, and its purpose is to make the computer or network unable to...

AI Technical Summary

Problems solved by technology

This traditional mode can alleviate denial of service attacks to a certain extent, but the disadvantage is that additional serial network devices need to be added, which reduces the reliability of the network and increases the cost

[0009] For another kind of built-in firewall with anti-denial of service attack, it can protect the external network from the denial of service attack on the firewall itself, but its disadvantage is that it cannot protect the network behind it, so this solution cannot really defend against denial of service attacks. service attack

Images