An Active DDoS Defense System Based On Authorization Technique And Automatic Learning

In all sorts of problems of network security, Denial of Service (DoS) attack is a kind of network attack of which is easy to launch, but hard to defend and eradicate. At present, many of produces to defend DoS are too simply to defend DoS effectively. Especially, the last Distributed Denial of Service (DDoS) had produced a grest deal difficulties to traditional produces to defend DoS. A new system to defend DoS - Active DDoS Defense System (ADDS) - is presented in this paper.Active DDoS Defense System (ADDS) implements technique of architecture defense to integrate routers, firewalls and the host to defend DDoS attacks; compensates the deficiencies of isolated defenses made by routers, firewalls or kernel defense programs; implements technique of multi-segments timeout to reinforce system defense against DDoS attacks; implements technique of net traffic analysis to control routers for optimizing net traffic distribution; implements authorization to eliminate DDoS attacks made by agents. The application of multiple technology and multilayer defense develops capacity against DDoS attacks.