Active defense DDOS system based on SDWAN

Abstract

The invention discloses an active defense DDOS system based on an SDWAN. The system comprises a cloud service platform; an SDWAN controller; an attack monitoring module is used for collecting attack data in a public network; an attack data analysis module is used for extracting attack features in the attack data; a DDOS attack defense module interacts attack characteristics through a plurality of SDWAN controllers and matches corresponding defense strategies; an attack response defense module is used for pre-formulating a defense strategy; when the attack monitoring module detects that a user is attacked, attack data is sent to an attack data analysis module for attack feature extraction, and a corresponding defense strategy is matched according to attack features in the cloud service platform through data interaction of the multiple SDWAN controllers so as to defend a previous attack event; Meanwhile, a pre-formulated defense strategy corresponding to a virtual feature approximate to the attack feature in the attack response defense module is called for active defense. According to the active defense DDOS system based on the SDWAN, the defense efficiency is relatively high when a DDOS attack event occurs.

Description

technical field [0001] This application relates to the technical field of network security defense, specifically a SDWAN-based active defense DDOS system. Background technique [0002] With the development of network technology and Internet economy, network services have penetrated into various fields such as social production, life and national security. Therefore, the issue of network security becomes more and more important. The SDN in the prior art has strong perception management and control capabilities and intelligent scheduling capabilities. However, when the current large-scale traffic and large-scale DDOS attacks occur, the network service defense system based on SDN cannot respond quickly to quickly formulate appropriate defense strategies, resulting in untimely and time-consuming problems of network defense. , Therefore, SDWAN-based network security system has entered the field of vision of the industry. Contents of the invention [0003] The purpose of this...

AI Technical Summary

Problems solved by technology

However, when the current large-scale traffic and large-scale DDOS attacks occur, the network service defense system based on SDN cannot respond quickly to quickly formulate an appropriate defense strategy, resulting in the problem of untimely and time-consuming network defense. , therefore, the SDWAN-based network security system has entered the field of vision of the industry

Images