Method for defending against denial of service attack based on cloud computation platform

Abstract

The invention relates to a method for defending against a denial of service attack based on a cloud computation platform, which solves the problem of the HTTP (HyperText Transfer Protocol) denial of service attack on a concrete application. A CPU (Central Processing Unit), a network throughput rate and the like are analyzed to determine whether the denial of service attack exists, and after the existence of an attack behavior is determined, access data is first intercepted; access users are subjected to redirected accesses, and identifying code technology with 4-digit random numbers / letters plus mathematical problems with fixed answers is adopted at Cookie; meanwhile, the number of the redirected accesses is defined to discriminate a legal user from an attacker, and therefore, the IP of the attacker is added to a blacklist, and is banned from accessing so as to filter the attacker; as for the attacks which are disguised as the legal user and continue to attack a server, the inherent elastic performance of the cloud computation platform is utilized to dynamically increase a network bandwidth and the number of virtual servers; and after a system is stabilized, an original system state is recovered, the bandwidth is recovered, and the virtual servers are removed so as to effectively defending against the denial of service attack.

Description

technical field [0001] The invention is a solution for processing denial-of-service attacks based on a cloud computing platform, which is mainly used for defending against denial-of-service attacks in a cloud computing environment and belongs to the field of information security. Background technique [0002] With the development of Internet network technology and the continuous improvement of computer technology, the ability of data transmission and processing in the network has increased linearly. People hope to obtain a direct and convenient way of computing and processing, without installing application software, as long as they are connected to the Internet, they can use the idle computer resources connected to the network to process tasks. [0003] In this context, cloud computing emerges as the times require. The so-called cloud computing is to connect a cloud computing platform composed of a large number of servers and storage device clusters through a computer netwo...

AI Technical Summary

Problems solved by technology

[0010] This kind of attack is characterized by low attack rate and few attack launching nodes, but the damage caused by each attack is very large, and it is not easy to be detected by detection tools

Images