DDoS attack protection system

Abstract

The invention discloses a DDoS attack protection system, and the system comprises a collection module which is used for collecting network state data; a preprocessing module which is used for screening the network state data according to a first preset rule; a judgment module which is used for judging whether the preprocessed network state data is DDoS attack data or not according to a second rule: transmitting the DDoS attack data and the IP address of a corresponding user to a warning module if the preprocessed network state data is DDoS attack data; the warning module which is used for judging whether the current time belongs to first preset time or not: generating warning information, transmitting the warning information to a monitoring terminal, and transmitting the DDoS attack data and the IP address of the corresponding user to a blocking module; the blocking module which is used for carrying out the blocking of the DDoS attack data and the IP address of the corresponding user; a deblocking module which is used for carrying out the deblocking of the DDoS attack data and the IP address, transmitted by the blocking module, of the corresponding user when the current time exceeds second preset time; and the monitoring terminal which is used for carrying out the visualized processing and displaying of the preprocessed network state data.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a DDoS attack protection system. Background technique [0002] With the development of Internet technology, the dependence of production and life on the Internet is increasing, and the demand for network security is particularly prominent. Distributed Denial of Service (DDoS) attack refers to a malicious network in which one or more attackers control a large number of computers as the attack source and send a large amount of data to a target at the same time, eventually causing the target to be paralyzed. Behavior. [0003] At present, there are mainly the following methods for implementing DDoS protection: [0004] (1) Protective equipment [0005] By using professional protection equipment that supports high bandwidth and high throughput, the traffic is cleaned according to the protection strategy, and the cleaned traffic is forwarded to the real service. This kind of solu...

AI Technical Summary

Problems solved by technology

[0011] The present invention provides a DDoS attack protection system to solve the problem that the DDoS attack protection in the prior art needs additional purchase cost and maintenance cost

Images