DDoS 攻擊的防御是當(dāng)前網(wǎng)絡(luò)安全研究領(lǐng)域中的難點。文章提出的方案能夠全面、主動預(yù)防DDoS 攻擊。使用蜜罐技術(shù)能夠預(yù)防已知類型的DDoS 攻擊；使用基于RBF-NN 能夠?qū)崟r檢測DDoS 攻擊，檢測率可以達(dá)到97.9%；使用分塊包標(biāo)記算法進(jìn)行追蹤能夠保持較低的重構(gòu)誤報率和較低的計算復(fù)雜度；使用分組漏斗的負(fù)載均衡技術(shù)能夠有效的緩解攻擊效果，保證了服務(wù)質(zhì)量。該方案所采用的技術(shù)，實現(xiàn)簡單，代價小，具有很好的實際應(yīng)用前景。
關(guān)鍵詞：分布式拒絕服務(wù)；拒絕服務(wù)；神經(jīng)網(wǎng)絡(luò)；IP 追蹤

Abstract:The defense of DDoS attacks has become the difficult area in network security.The
proposed scheme can prevent DDoS attacks roundly and actively.It implements detector based on RBF-NN to detect DDoS attacks ,and the precise can reach 97.9%;implements an IP traceback scheme with packet marking in blocks,which provides higher precision and more efficient computation;implements a novel approach named Packet funneling to mitigate DDoS attacks,it ensures the quality of service. The technology of the scheme is practical and easy to
deploy,low price,it has the very good application prospect.
Key Words:DDoS；DoS；Neural Network;IP traceback