The Implementation Of New Arithmetic For Host Computer About Defense DoS Attack

Denial of Service (DoS) attack has become the most primary danger about the network' safety and the host computer .With the bandwidth's augment and the development of Distributed Denial of Service (DDoS), it has become the main bottleneck of prevent DoS attack. So it has become the important task to prevent DoS attack base on the host computer's resource.At first, the paper introduced the concept of DoS attack, the aim, the meaning and the actuality. The second it discussed the principium and questions about DoS attack. Base on the state of computer' resource to interdiction IP address, the paper make up a algorithm to against DoS attack and protect the host computer's resource. Next, the algorithm of realizing was designed in Linux's firewall of Netfilter. With the local area network's examination, it has indicated that the algorithm can judge the state of the hostcomputer, and turn the passive recovery to active recovery. The algorithm can against the SYN Flooding attack, smurf flooding attack, and the DDoS attack using of TFN and Trin.