Method and system for preventing link-type DDoS attack

Abstract

The present invention provides a method and system for preventing a link-type DDoS attack. The method includes the steps that a network traffic monitoring system monitors network traffic entering a protected network through a main outlet link of a protected network, wherein the protected network includes a main outlet link and a backup link; determining whether a DDoS attack standard is reached ornot when the network traffic is less than a preset alarm value, and notifying the DDoS system of an internal network to perform the traffic diversion when the DDoS attack standard is reached; notifying the DDoS system of a public network to perform the traffic diversion when the network traffic is greater than or equal to the preset alarm value, so that the DDoS system of the public network is linked with a public network DNS, and pulls the network traffic to the DDoS system of the public network for clearing, and injects the cleared network traffic back to the protected network through the backup link. The method can combine the advantages of enterprise-level DDoS products and operators' DDoS products, and ensures security as much as possible without limiting network traffic.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a method and system for preventing link-type DDoS attacks. Background technique [0002] A Distributed Denial of Service (DDoS) attack refers to combining multiple computers as an attack platform to launch a DDoS attack on one or more computers in the attack platform, thereby multiplying the power of the denial of service attack. Usually, the attacker uses a stolen account to install the DDoS master control program on one computer, and installs the agent program on each computer in the attack platform. The master control program will communicate with a large number of agent programs at a set time. The program launches an attack when it receives an instruction. [0003] The main types of DDoS attacks are as follows: make the system of the attacked object run at full capacity and cause other normal users to be unable to access, make the system of the attacked object abnormal...

AI Technical Summary

Problems solved by technology

[0004] At present, anti-DDoS products can be divided into enterprise-level DDoS products and carrier DDoS products. However, enterprise-level DDoS products can only be used in scenarios where the network traffic does not exceed the enterprise egress bandwidth, and carrier DDoS products have security risks.

Images