Active defense ddos ​​system based on sdwan

Abstract

This application discloses an active defense DDOS system based on SDWAN, including: cloud service platform; SDWAN controller; attack monitoring module, which obtains attack data in the public network; The defense module uses multiple SDWAN controllers to interact with attack features and match corresponding defense strategies; the attack response defense module is used to pre-determine defense strategies; when the attack monitoring module detects that the user is attacked, the attack data is sent to the attack data analysis The module extracts attack features, and through the data interaction of multiple SDWAN controllers, matches the corresponding defense strategy according to the attack features in the cloud service platform to defend against past attack events; at the same time, calls the attack response and defense module to approximate the attack features The pre-established defense strategy corresponding to the virtual features of the system is actively defended. The SDWAN-based active defense DDOS system of this application has high defense efficiency when a DDOS attack event occurs.

Description

technical field [0001] The present application relates to the technical field of network security defense, in particular to an SDWAN-based active defense DDOS system. Background technique [0002] With the development of network technology and the Internet economy, network services have penetrated into various fields such as social production, life and national security. Therefore, the issue of network security becomes more and more important. The SDN of the prior art has strong perception management and control capabilities and intelligent scheduling capabilities. However, when large-scale and large-scale DDOS attacks occur, the network service defense system based on SDN cannot respond quickly to quickly formulate appropriate defense strategies, resulting in untimely and time-consuming network defense. Therefore, the network security system based on SDWAN has entered the field of vision. SUMMARY OF THE INVENTION [0003] The purpose of this application is to provide a...

AI Technical Summary

Problems solved by technology

However, when the current large-scale traffic and large-scale DDOS attacks occur, the network service defense system based on SDN cannot respond quickly to quickly formulate an appropriate defense strategy, resulting in the problem of untimely and time-consuming network defense. , therefore, the SDWAN-based network security system has entered the field of vision of the industry

Images