Attack traffic protection system, method and device, electronic equipment and storage medium

Abstract

The invention relates to the technical field of network security, in particular to an attack traffic protection system, method and device, electronic equipment and a storage medium, which are used forproviding an automatic hierarchical protection method and improving the protection efficiency, and the system comprises: a core router cluster used for forwarding received mirror image traffic of traffic to be processed to an attack detection module; an attack detection module which is used for detecting the mirror image flow, generating alarm information after the attack traffic is detected, andreporting the alarm information to the central centralized control module; and a central centralized control module which is used for determining the attack type of the attack traffic according to the traffic feature information in the alarm information, wherein if the attack type comprises a bandwidth consumption type attack, the core router cluster is enabled to protect the to-be-processed flow, and if the attack type comprises the resource consumption type attack, the cleaning module is enabled to protect the to-be-processed flow. Since automatic layered protection is performed according to the flow characteristic information of the attack flow, the protection efficiency is improved.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular to an attack traffic protection system, method, device, electronic equipment and storage medium. Background technique [0002] As DDoS (Distributed Denial-Of-Service, distributed denial-of-service attacks) attacks become more and more frequent threats to basic business systems and data security. The design method of the DDoS protection system in the related art is usually based on Netflow (network flow) to monitor the network attack traffic, and after the attack is found, the DDoS attack is mitigated by deploying a dedicated cleaning device in series or bypass. [0003] However, in the face of DDoS threats with complex attack scenarios in large-scale networks, due to the complex and changeable attack methods and various business scenarios, it is difficult to effectively protect and quickly adapt, and it is difficult to cover the DDoS threat with a single prote...

AI Technical Summary

Problems solved by technology

[0003] However, in the face of DDoS threats with complex attack scenarios in large-scale networks, due to the complex and changeable attack methods and various business scenarios, it is difficult to effectively protect and quickly adapt, and it is difficult to cover the DDoS threat with a single protection method or a single protection solution. The increasingly severe DDoS attacks cannot meet the needs of business timeliness and automation

Images